CVE-2026-43500

• Two stable kernels with Dirty Frag fixes

  Two stable kernels with Dirty Frag fixes Greg Kroah-Hartman has released the 7.0.6 and 6.18.29 stable kernels with Hyunwoo Kim's patch for the second vulnerability ( CVE-2026-43500 ) reported with Dirty Frag and Copy Fail 2 . All users are advised to upgrade. Two

• 16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

  16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as&

• More stable kernels with partial Dirty Frag fixes

  More stable kernels with partial Dirty Frag fixes Greg Kroah-Hartman has released the 6.1.171 , 5.15.205 , and 5.10.255 stable kernels, quickly followed by 6.1.172 and 5.15.206 kernels. This is another round of stable kernels to provide fixes for one of the CVEs ( CVE-2026-43284

• Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

  Active attack: Dirty Frag Linux vulnerability expands post-compromise risk Dirty Frag is a newly disclosed Linux local privilege escalation vulnerability affecting kernel networking and memory-fragment handling components including esp4, esp6, and rxrpc. The vulnerability enable

• Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

  Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Financ

All reports →