A critical security alert has been issued regarding CVE-2026-68138, a privilege escalation vulnerability in the Linux kernel that allows local users to escalate their privileges to root. The vulnerability is due to a race condition in the traffic-control layer's code. A proof-of-concept (PoC) exploit has been published, highlighting the ease of access for potential attackers. The flaw, with a CVSS score of 7.8, affects all kernels from version 5.1 to 7.1.5. It was patched in versions 7.1.6 and 7.2-rc5. Users are advised to update their systems immediately and restrict local access until patching is confirmed.
Attackers Can Exploit Linux Kernel Flaw CVE-2026-68138 for Root
CyberSIXT Evidence Panel
Article by CyberSIXT