These trackers are archived — every tracked release has a fix and updates have ended.
Active trackers are on the front page.
Archived
- CVE-2026-64531 — OVSwrap
-
Linux kernel Open vSwitch datapath integer overflow: an oversized nested action stream
wraps the 16-bit
nla_len, letting an unprivileged local user escalate to root
on hosts running the OVS datapath with conntrack.
- CVE-2026-53362 — IPV6_FRAG_ESCAPE
-
Linux kernel IPv6 fragmentation heap overflow in
__ip6_append_data() corrupts
adjacent memory, enabling an unprivileged container escape and local privilege escalation.
- CVE-2026-53359 — Januscape
-
Linux kernel KVM/x86 shadow-MMU use-after-free enabling a guest-to-host escape to root on
Intel and AMD; also a local crash or privilege escalation where
/dev/kvm is
world-accessible.
- CVE-2026-46316 — ITScape
-
Linux kernel KVM/arm64 vGIC-ITS double-put race enabling a guest-to-host escape to
host-kernel privilege — the arm64 companion to Januscape.
- CVE-2026-46243 — CIFSwitch
-
Linux kernel CIFS client cifs.spnego key-description forgery steers the rootful
cifs.upcall helper into loading an attacker-controlled NSS module, for local privilege
escalation.
- CVE-2026-43499 — GhostLock
-
Linux kernel rtmutex/futex requeue-PI stack use-after-free in
remove_waiter(), giving any unprivileged local user root — and an
unprivileged container an escape to the host.
- CVE-2026-43494 / CVE-2026-43502 — PinTheft
- Linux kernel RDS zerocopy double-free leading to io_uring page-cache overwrite.
-
CVE-2026-43284 — Dirty Frag
- Linux kernel xfrm-ESP and RxRPC page-cache write local privilege escalation.
-
CVE-2026-31431 — Copy Fail
- Linux kernel algif_aead local privilege escalation.
-
CVE-2026-9256 — nginx rewrite-module heap overflow
-
nginx rewrite module heap buffer overflow via overlapping PCRE regex captures, crashing
the worker process — and potentially remote code execution where ASLR is bypassed.