Ars TechnicaDan Goodin
Linux Kernel Bug Lets Unprivileged Users Escalate to Root
Researchers have uncovered a critical vulnerability in the Linux kernel tracked as CVE-2026-23111, which allows unprivileged users to escalate their permissions to root. The issue arises from a single misplaced character in the nf_tables subsystem, which manages firewall rules and packet filtering. This bug, a use-after-free vulnerability, allows attackers to manipulate memory and hijack control flow, despite stability tests showing 99% reliability on idle systems.
Although this exploit was fixed in February, it represents a significant security risk, especially when combined with other vulnerabilities affecting Linux.
Story timeline CVE-2026-23111
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 9 Jun · 08:41 UTC | Security Affairs | CVE-2026-23111 flaw in Linux nf_tables lets local users gain root |
| Tue 9 Jun · 15:26 UTC | Ars Technica | Linux Kernel Bug Lets Unprivileged Users Escalate to Root (this article) |