#privilegeescalation — Public Fediverse posts

A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

#CVE202664582 #LinuxKernel #PrivilegeEscalation #RDMA #UseAfterFree #InfoSec

http://securityonline.info/cve-2026-64582-rdma-rxe-kernel-lpe-poc/?utm_source=mastodon&utm_medium=jetpack_social

For eighteen years. No public exploit exists yet; no CISA catalog entry as of August 7.

Restrict SCTP access on multi-tenant systems and containers, and patch the Linux kernel when fixes become available.

Reward: You've received the Phantom Packet Badge. It does nothing. Much like eighteen years of SCTP audits.

#Linux #CyberSecurity #ZeroDay #ContainerEscape #PrivilegeEscalation #RootedAndBooted (2/2)

#Linux: a 13-year-old Linux kernel flaw dubbed #OVSWrap lets local users gain root privileges on most Linux distributions. CVE-2026-64531 vulnerability is in the Linux kernel’s Open vSwitch datapath:
#PrivilegeEscalation
👇

https://securityaffairs.com/196657/hacking/ovswrap-13-year-old-linux-kernel-flaw-lets-local-users-become-root.html

CVE-2026-44095 - High privilege escalation in network config script lets local users execute commands as root. CVSS 7.8. No patch available - restrict local access. #CVE #infosec #privilegeescalation

https://www.valtersit.com/cve/CVE-2026-44095/

📬 LegacyHive: Neuer Windows-Zero-Day hebelt selbst vollständig gepatchte Systeme aus
#Cyberangriffe #ITSicherheit #Exploit #ITSicherheit #LegacyHive #MicrosoftWindows #PrivilegeEscalation #Rechteausweitung #SYSTEMRechte #UserProfileServiceProfSvc #WindowsSicherheitslücke #WindowsZeroDay https://sc.tarnkappe.info/43a283

GhostLock (CVE-2026-43499): What It Is and Why We Patched All Managed Servers

This article provides an overview of recently patched #security vulnerability, Ghostlock (CVE-2026-43499).
GhostLock (CVE-2026-43499): What It Is, Why It Matters, and How Rad Web Hosting Protected Customer Servers
Published: July 10, 2026

When a critical operating system vulnerability is disclosed, every hour counts. That's why ...
Continued 👉 https://blog.radwebhosting.com/ghostlock-cve-2026-43499-what-it-is-and-why-we-patched-all-managed-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #criticalvulnerability #privilegeescalation

GhostLock (CVE-2026-43499): What It Is and Why We Patched All Managed Servers

This article provides an overview of recently patched #security vulnerability, Ghostlock (CVE-2026-43499).
GhostLock (CVE-2026-43499): What It Is, Why It Matters, and How Rad Web Hosting Protected Customer Servers
Published: July 10, 2026

When a critical operating system vulnerability is disclosed, every hour counts. That's why ...
Continued 👉 https://blog.radwebhosting.com/ghostlock-cve-2026-43499-what-it-is-and-why-we-patched-all-managed-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #privilegeescalation #criticalvulnerability

Oh, joy! 😒 A riveting tale of OpenBSD's latest "oopsie-daisy" moment, where users can magically escalate privileges—because who doesn't love a good #security blunder? Meanwhile, the article itself is a masterpiece of accessibility: blocked by Cloudflare like a bouncer at a club for nerds. 🕵️‍♂️🔒
https://nvd.nist.gov/vuln/detail/cve-2026-57589 #OpenBSD #Blunder #Accessibility #Issues #HackerNews #PrivilegeEscalation #HackerNews #ngated

OpenBSD has a use-after-free allowing local privilege escalation to root

https://nvd.nist.gov/vuln/detail/cve-2026-57589

Comments: https://news.ycombinator.com/item?id=48831658

#HackerNews #OpenBSD #UseAfterFree #PrivilegeEscalation #Cybersecurity #Vulnerability #CVE-2026-57589

🛡️🪲 Managerul de pachete GNU Guix a fost lovit de patru vulnerabilități de securitate 🚀💻

GNU Guix, managerul de pachete tranzacțional și avansat din ecosistemul GNU — apreciat la nivel global pentru abordarea sa puristă în privința libertății software, configurarea declarativă și reproductibilitatea absolută a build-urilor — se confruntă cu o provocare serioasă de securitate. Comunitatea de dezvoltatori a confirmat oficial descoperirea a patru vulnerabilități în logica sa de funcționare, forțând emiterea unor patch-uri de urgență.

Deoarece GNU Guix folosește un demon de fundal cu privilegii ridicate (guix-daemon) pentru a compila și izola pachetele destinate utilizatorilor, aceste breșe reprezintă un risc considerabil pentru integritatea sistemelor afectate.

Iată detaliile principale despre problemele identificate:

🔹 Breșe la nivelul privilegiilor și izolării (Sandbox Escape):
Vulnerabilitățile identificate vizează în mod special mecanismul de sandbox (mediul izolat) pe care Guix îl folosește în timpul compilării pachetelor din surse.

Riscul: Anumite erori logice în gestionarea permisiunilor și a directoarelor temporare de build puteau permite unui pachet malițios să „evadeze” din containerul său izolat. Odată evadat, codul atacatorului ar fi putut interfața cu fișierele critice ale sistemului gazdă sau ar fi putut obține o escaladare neautorizată a privilegiilor până la nivelul de root.

🔹 Manipularea reproducerii pachetelor (Build Poisoning):
Una dintre cele mai mari calități ale GNU Guix este reproductibilitatea (același cod sursă generează bit cu bit același binar). Breșele raportate introduceau un risc de „otrăvire” a procesului de build local, permițând unui utilizator local neautorizat sau unui script malițios să modifice rezultatul compilării altor pachete de pe mașină, alterând binarul final fără ca administratorul să observe imediat.

🔹 Remedierea și corecturile aplicate:
Echipa GNU Guix a reacționat cu promptitudine imediat ce detaliile tehnice au fost verificate. A fost lansată o actualizare care modifică modul în care guix-daemon gestionează variabilele de mediu, legăturile simbolice (symlinks) și montarea directoarelor în sandbox, închizând complet portițele de evadare folosite în scenariile de atac testate.

⚠️ Acțiune obligatorie pentru utilizatori: Dacă rulezi GNU Guix ca manager de pachete independent pe o altă distribuție sau dacă folosești sistemul de operare complet Guix System, este critic să îți actualizezi demonul de sistem imediat.

Pentru a securiza mașina, utilizatorii trebuie să ruleze comanda de actualizare a profilelor și, extrem de important, să repornească serviciul de fundal:

Bash
guix pull
sudo systemctl restart guix-daemon
Prin această intervenție rapidă, comunitatea demonstrează din nou că transparența totală a codului open-source și auditurile de securitate riguroase sunt cele mai bune mecanisme de protecție împotriva defectelor inevitabile de programare.

#GNUGuix #GuixSystem #GNULinux #Cybersecurity #PackageManager #SandboxEscape #PrivilegeEscalation #OpenSource #TechNews

#Linux got bitten by crypto-related page cache vulnerabilities in recent weeks. They had rather boring names: #CopyFail #DirtyFrag #Fragnesia

The #FreeBSD community is fixing this by naming their own bug of this class #BUMSRAKETE.

(Now, if you ran the name through a translator and are questioning its legitimacy: It's as real as the person that inspired the bug report's style, unfortunately.)

https://bumsrake.de/

#PrivilegeEscalation #security #vulnerability

🚀🔐 Oh joy, yet another thrilling tale of privilege escalation in the #FreeBSD 14.x kernel! Apparently, four bytes and a bit of oversight is all it takes to achieve root status because... who needs #security, right? 🤦‍♂️ Expect the usual #GitHub proof-of-concept, because nothing screams "fix me" like a public exploit! 🐑💥
https://fatgid.io/ #privilegeEscalation #vulnerability #kernel #exploit #HackerNews #ngated

Patch immediately before public exploits emerge.

https://www.drupal.org/sa-core-2026-004

Affected:

- 8.9.0 , < 10.4.10
- 10.5.0 , < 10.5.10
- 10.6.0 , < 10.6.9
- 11.0.0 , < 11.1.10
- 11.2.0 , < 11.2.12
- 11.3.0 , < 11.3.10

CVE-2026-9082 - Highly critical - SQL Injection
CVE-2026-8495 - Missing Authorization
CVE-2026-8493 - XSS
CVE-2026-8492
CVE-2026-8491

#Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

📬 MiniPlasma zeigt: Selbst gepatchtes Windows ist angreifbar
#ITSicherheit #ChaoticEclipse #CVE202017103 #Microsoft #MiniPlasma #Patchmanagement #PrivilegeEscalation #Sicherheitslücke #SYSTEMRechte #Windows11 #WindowsZeroDay https://sc.tarnkappe.info/9841ba

#Fragnesia Made Public As Latest #Linux Local #PrivilegeEscalation #Vulnerability

A new Linux local privilege escalation flaw called Fragnesia has been disclosed as a Dirty Frag-like vulnerability, allowing arbitrary byte writes into the #kernel page cache of read-only files through a separate ESP/XFRM logic bug.
#dirtyfrag #security

https://linux.slashdot.org/story/26/05/13/1621258/fragnesia-made-public-as-latest-linux-local-privilege-escalation-vulnerability?utm_source=rss1.0mainlinkanon&utm_medium=feed

🚨 Oh no, not another "all versions" #bug in FreeBSD! 🎉 Apparently, executing a program in your own system is now a privilege escalation 🧙‍♂️✨ Bravo to FreeBSD's stellar security team for fixing a problem that they didn't know existed until Ryan from Calif.io came along to enlighten them. 🙃🔒
https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc #FreeBSD #PrivilegeEscalation #SecurityFix #HackerNews #Califio #HackerNews #ngated

Come funzionano le vulnerabilità di #PrivilegeEscalation #Linux basate su corruzione della Cache? (#CopyFail, #DirtyFrag, #DirtyPipe)

https://youtu.be/1rbvUpTI_OY

And here's another one:
https://github.com/0xdeadbeefnetwork/Copy_Fail2-Electric_Boogaloo

This one is not fixed by f4c50a40, so all current kernels are vulnerable. Looks like mitigation is possible by blocking kernel modules `esp4` + `esp6` here as well (and breaking #IPSec in doing so). Can someone confirm?

Why is it called "Electric Boogaloo"… is this a #DonaldByrd fan? Were they inspired by this week's @thekalimerashow shows??

#privilegeescalation #linux #vulnerability #linuxadmin #sysadmin #exploit #copyfail2 #electricboogaloo

Here we go again :-/ Another deterministic #privilegeescalation bug in the #Linux kernel. Make sure you're using at least the following version of your branch to mitigate against #dirtyfrag:

- 7.0.5
- 6.18.28
- 6.12.87
- 6.6.138
- 6.1.171
- 5.15.205
- 5.10.255

6.19 is eol, so it probably won't get patched. Remove and blocklist the following modules if you have to use an unpatched kernel: esp4 esp6 rxrpc

See https://github.com/V4bel/dirtyfrag/blob/master/README.md for more info.

#vulnerability #linuxadmin #sysadmin #exploit