#AFUNIX
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-101021
📊 5.5/10

📝 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The lo...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101021

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 2:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-100954
📊 4.7/10

📝 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or peer...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100954

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:02 AM
euvd-bot.bsky.social
🚨 EUVD-2026-98481
📊 4.7/10

📝 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a bound...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98481

#cybersecurity #infosec #cve #euvd
October 13, 2026 at 1:01 PM
securityonline.bsky.social
A public PoC for CVE-2026-53361 turns an AF_UNIX kernel race into a local container escape on Linux.

#CVE202653361 #ContainerEscape #LinuxKernel #AFUNIX #UseAfterFree #KernelExploit
CVE-2026-53361: PoC Exploit Enables AF_UNIX Container Escape
TL;DR Researchers published full details and proof-of-concept exploit code for CVE-2026-53361, a use-after-free in the Linux kernel AF_UNIX garbage collector. The flaw allows an unprivileged local user to escape a container and corrupt kernel memory. Multiple stable and enterprise kernels are affected, and patches are now available. Why It Matters This CVE-2026-53361 container escape bug needs no special privileges. Any local user with a shell can trigger it.
securityonline.info
August 27, 2026 at 12:41 AM