Skip to content
OriginalSign in
Image: SecurityOnline

SecurityOnlineDo Son

Linux kernel UDPv6 flaw CVE-2026-53362 lets local users gain root

Part of the CVE-2026-53362 story · since 14 Jul

Quiet for 9 weekslast report 28 Aug7 articles4 outlets
14 Jul · SecurityOnline first9 Sep28 SepNowThis article3rd of 7
  • Tue 14 Jul, 17:16 UTC. SecurityOnline, first report. Linux Kernel Bug Lets Users Gain Root Access via Bad Epoll. Cites a CVE in CISA KEV.
  • Tue 21 Jul, 03:32 UTC. SecurityOnline. AI flags 440 Linux kernel bugs, CVE-2026-53362 highlighted. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 15:50 UTC. SecurityOnline. Linux kernel UDPv6 flaw CVE-2026-53362 lets local users gain root. Cites a CVE in CISA KEV. This article, 3rd of 7.
  • Thu 27 Aug, 20:52 UTC. CISA, its first report on the story. CISA adds Linux kernel CVE‑2026-53362 to KEV as exploited. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 03:32 UTC. SecurityOnline. CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 13:08 UTC. SecurityWeek, its first report on the story. OpenAI AI Agents Exploit Linux Kernel Flaw in Coordinated Attack. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 14:20 UTC. Security Affairs, its first report on the story. CISA Adds ownCloud Linux Kernel and Artifactory Flaws to KEV List. Cites a CVE in CISA KEV.

The content discusses the Linux kernel vulnerability CVE-2026-53362, also known as Fraggap, which allows local privilege escalation due to an out-of-bounds write in the UDPv6 code path. The CVSS score is 7.8, indicating high severity. The vulnerability can be exploited by local attackers to gain root access on systems with IPv6 support enabled. Technical details and proof-of-concept code have been published, increasing the risk for unpatched systems. Users are advised to update to fixed kernel versions immediately to mitigate the risk.

How the story developed

All 7 articles
Quiet for 9 weekslast report 28 Aug7 articles4 outlets

7 articles from 4 outlets since 14 Jul. Quiet since 28 Aug. This was the 3rd report, 14 days after the first.

Now14 Jul18202224262827 AugFirst reportSecurityOnline · 14 Jul, 17:16This article3rd of 7 · day 14
  • Tue 14 Jul, 17:16 UTC. SecurityOnline, first report. Linux Kernel Bug Lets Users Gain Root Access via Bad Epoll. Cites a CVE in CISA KEV.
  • Tue 21 Jul, 03:32 UTC. SecurityOnline. AI flags 440 Linux kernel bugs, CVE-2026-53362 highlighted. Cites a CVE in CISA KEV.
  • Tue 28 Jul, 15:50 UTC. SecurityOnline. Linux kernel UDPv6 flaw CVE-2026-53362 lets local users gain root. Cites a CVE in CISA KEV. This article, 3rd of 7.
  • Thu 27 Aug, 20:52 UTC. CISA, its first report on the story. CISA adds Linux kernel CVE‑2026-53362 to KEV as exploited. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 03:32 UTC. SecurityOnline. CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 13:08 UTC. SecurityWeek, its first report on the story. OpenAI AI Agents Exploit Linux Kernel Flaw in Coordinated Attack. Cites a CVE in CISA KEV.
  • Fri 28 Aug, 14:20 UTC. Security Affairs, its first report on the story. CISA Adds ownCloud Linux Kernel and Artifactory Flaws to KEV List. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 7 articles as a list
  1. Tue 14 JulDay 01
    1. Linux Kernel Bug Lets Users Gain Root Access via Bad Epoll17:16 · SecurityOnline · First report · Exploited CVE · Known exploited CVE

  2. Quiet for 6 days

    Tue 21 JulDay 71
    1. AI flags 440 Linux kernel bugs, CVE-2026-53362 highlighted03:32 · SecurityOnline · Picked up again · Known exploited CVE

  3. Quiet for 8 days

    Tue 28 JulDay 141
    1. Linux kernel UDPv6 flaw CVE-2026-53362 lets local users gain root15:50 · SecurityOnline · Picked up again · Known exploited CVE · This article, 3rd of 7

  4. Quiet for 4 weeks

    Thu 27 AugDay 441
    1. CISA adds Linux kernel CVE‑2026-53362 to KEV as exploited20:52 · CISA · official · CISA alert · Picked up again · Known exploited CVE
  5. Fri 28 AugDay 453
    1. CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory03:32 · SecurityOnline · Known exploited CVE
    2. OpenAI AI Agents Exploit Linux Kernel Flaw in Coordinated Attack13:08 · SecurityWeek · Known exploited CVE
    3. CISA Adds ownCloud Linux Kernel and Artifactory Flaws to KEV List14:20 · Security Affairs · Known exploited CVE

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in