These pages track how the distros and operating systems I have deployed are responding to specific vulnerabilities — which releases are patched, which are still exposed, and when the fixes shipped. Each tracker is updated twice daily with information from vendor advisories and other sources. Updates are continued until every tracked release has a fix.
Linux Kernel
- CVE-2026-43499 — GhostLock
-
Linux kernel rtmutex/futex requeue-PI stack use-after-free in
remove_waiter(), giving any unprivileged local user root — and an unprivileged container an escape to the host. - CVE-2026-53359 — Januscape
-
Linux kernel KVM/x86 shadow-MMU use-after-free enabling a guest-to-host escape to root on
Intel and AMD; also a local crash or privilege escalation where
/dev/kvmis world-accessible.
Applications
- CVE-2026-42533 — nginx map/regex capture clobbering
-
nginx two-pass script-engine heap buffer overflow: a
mapregex match between two capture references clobbers the PCRE captures, so the sizing and writing passes disagree — giving an unauthenticated attacker both an overflow and a heap-pointer leak, and with them pre-authentication remote code execution.
Archived
- CVE-2026-53362 — IPV6_FRAG_ESCAPE
-
Linux kernel IPv6 fragmentation heap overflow in
__ip6_append_data()corrupts adjacent memory, enabling an unprivileged container escape and local privilege escalation. - CVE-2026-46316 — ITScape
- Linux kernel KVM/arm64 vGIC-ITS double-put race enabling a guest-to-host escape to host-kernel privilege — the arm64 companion to Januscape.
- CVE-2026-46243 — CIFSwitch
- Linux kernel CIFS client cifs.spnego key-description forgery steers the rootful cifs.upcall helper into loading an attacker-controlled NSS module, for local privilege escalation.
- CVE-2026-43494 / CVE-2026-43502 — PinTheft
- Linux kernel RDS zerocopy double-free leading to io_uring page-cache overwrite.
- CVE-2026-43284 — Dirty Frag
- Linux kernel xfrm-ESP and RxRPC page-cache write local privilege escalation.
- CVE-2026-31431 — Copy Fail
- Linux kernel algif_aead local privilege escalation.
- CVE-2026-9256 — nginx rewrite-module heap overflow
- nginx rewrite module heap buffer overflow via overlapping PCRE regex captures, crashing the worker process — and potentially remote code execution where ASLR is bypassed.