CyberSIXT Search
Original
Image: Ars Technica

Ars TechnicaDan Goodin

Linux Kernel Bug Lets Unprivileged Users Escalate to Root

Part of the CVE-2026-23111 story · 2 articles · 2 outlets · since 9 Jun

Researchers have uncovered a critical vulnerability in the Linux kernel tracked as CVE-2026-23111, which allows unprivileged users to escalate their permissions to root. The issue arises from a single misplaced character in the nf_tables subsystem, which manages firewall rules and packet filtering. This bug, a use-after-free vulnerability, allows attackers to manipulate memory and hijack control flow, despite stability tests showing 99% reliability on idle systems.

Although this exploit was fixed in February, it represents a significant security risk, especially when combined with other vulnerabilities affecting Linux.

Story timeline CVE-2026-23111

Full timeline
Show as table
CVE-2026-23111 coverage
Published (UTC)OutletHeadline
Tue 9 Jun · 08:41 UTCSecurity AffairsCVE-2026-23111 flaw in Linux nf_tables lets local users gain root
Tue 9 Jun · 15:26 UTCArs TechnicaLinux Kernel Bug Lets Unprivileged Users Escalate to Root (this article)

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device