New CIFSwitch Linux flaw gives root on multiple distributions

A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request ...

Exploit released for new PinTheft Arch Linux root escalation flaw

PinTheft, a recently patched Linux privilege escalation vulnerability, now has a publicly available proof-of-concept (PoC) ...
Morning Overview on MSN

A new Linux privilege escalation flaw called Fragnesia gives attackers root access through a page cache corruption trick — patches are rolling out now

A pair of newly disclosed Linux kernel vulnerabilities, collectively dubbed Fragnesia, allow a local attacker to corrupt the ...
Threat Post

Bug in the Linux Kernel Allows Privilege Escalation, Container Escape

A missing check allows unprivileged attackers to escape containers and execute arbitrary commands in the kernel. To go along with the “Dirty Pipe” Linux security bug coming to light, two researchers ...
Threat Post

X.Org Flaw Allows Privilege Escalation in Linux Systems

The issue impacts many large distros with GUI interfaces. A local privilege-escalation and file-overwrite vulnerability in X.Org X server opens the door to trivial compromise in Linux systems that use ...
Dark Reading

Linux Kernel Bug Allows Local-To-Root Privilege Escalation

Tens of millions of Linux PCs and servers and 66% of all Android devices are impacted by a vulnerability in the Linux kernel that allows privilege escalation from local to root via a use-after-free ...
Infosecurity-magazine.com

CrackArmor Flaws Expose Linux Systems to Privilege Escalation

A set of newly identified vulnerabilities in the Linux security module AppArmor could allow attackers to gain root access, bypass system protections and trigger service outages across millions of ...

CISA Warning: High-Severity Linux Flaw Puts Unpatched Systems at Risk

CISA warns that the nine-year-old Linux Copy Fail flaw is being actively exploited, allowing local attackers to gain root access on affected systems.

Critical New Linux Zero-Day Leaked—What Admins Need To Do Now

Dirty Frag, a critical Linux kernel zero-day vulnerability with no patch and giving hackers root, has gone public after an embargo was broken. Here’s the workaround.
CSOonline

Dangerous privilege escalation bugs found in Linux package manager Snap

Researchers found an easy-to-exploit vulnerability in Snap, a universal application packaging and distribution system developed for Ubuntu but available on multiple Linux distributions. The flaw ...