A deterministic local privilege escalation vulnerability has been reported affecting the default installations of the latest Arch, Fedora, Debian, Amazon Linux, and RHEL distributions. The vulnerability affects systems that have unprivileged user namespaces enabled, openvswitch auto-loading enabled, and a stock kernel carrying the Fragnesia fix.

Synology était par le passé limité à de petites machines virtuelles tournant sous Docker. Mais avec

A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS score: 7.8) and codenamed OVSwrap by its discoverer, was disclosed by security researcher Asim

Posted by manizada on Jul 28 Hi folks, Emailing here now that the embargo agreed upon with linux-distros@ has expired. Flagging a local root vulnerability in the Linux kernel's Open vSwitch datapath (originally reported to security () kernel org and OVS maintainers on Jun 19). The fix is now public and has shipped in the relevant stable trees: 3f1f75536668 ("net: openvswitch: reject oversized nested action attrs") The first fixed upstream stable releases...