linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] more kernel vulnerabilities for gaining root access

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: [[Linux-announce] ] more kernel vulnerabilities for gaining root access
Date: Fri, 24 Jul 2026 16:05:32 +0200
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=psi.ch; dmarc=pass action=none header.from=psi.ch; dkim=pass header.d=psi.ch; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=3g/4vdR1HZA8fuLGVRlEAobMLNbZwqDMksokHpBhppQ=; b=tsh0MoV1zliO1TZEQEZ5f0tfpsUIbExVmcNU2FLK94Y/YINPkwOM2BBAPPETo/p84xb/xGEDEmYOfu5N7uF4mdsGPDcVigg0hx5P8h4nvim+SNCvmsB9fVA6cae/MQwjAzzyUtCvQ5fi9lPbkojH23d0LzOBc+uCiOqG+hjY25SyjTALlriEXyGWGT5bwEeHivH2NgcerEsYMsvKdF8MQgLkfKcmzSnV57lf3Xt6wrfBrlJkDjRVILywfTpBGd9PzUYUBvJO8aly11EStWXmj+e3inL9i8S/2I2AZRymq70yQuM8IblV9IAtAkVX/z7vmodLEfmaEP9rLxESJo4kRg==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=BT8mvciUawZK1G3bit2W8m+6gvHqWDdpSCTEaY2b3Nk4+3pTHh0fuGBvkchQ1NQqJSgtDb95PVkJv6+2DfQpMw51fKieQ+kiaLahSIZWewhDfNiBTABDlRcgomQg4OVstEDqWGSXLvGjXFiO2xTkUhLZ0QbaWipZQ0woUeY/8n58Lo2Fsuw1vQ4g2rBsksju7LoNg6nLqBdi7QA9a9MRdbfKw8YjLPJPRXsVere38CQGFY00ab6BtkPL8M4E5v9TEFqRC28BVRT8LgWVIgcwkrq7WUpQw4XDEDK/NsoTWvBqtoRZZeWU5DbFtAVsjvZSz/NLpCMRUc/2yu5QS0k9bQ==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Hi

Two vulnerabilities allowing for local privilege escalation* have been reported:

DRM Use-After-Free - CVE-2026-46215 [1]
RefluXFS - CVE-2026-43499 [2,3]

RedHat released new kernels with fixes:

RHEL8: kernel-4.18.0-553.144.1.el8_10
RHEL9: kernel-5.14.0-687.26.1.el9_8

so you may update and reboot. There is no other mitigation possible.
You can do this e.g. by running:

dnf clean all
dnf update -y kernel
# or better "dnf update -y" for full update
puppet agent -t
reboot

*
How severe is a local privilege escalation vulnerability?
It allows any user/process (in this two cases also from within containers) to break out and get root permissions on the full machine.
If you trust all users and all software running on the system, you do not need to hurry very much updating.
If you deal with unknown users, or you load run or let run some random software or containers, then you should update and reboot rather soon.

[1] https://access.redhat.com/security/cve/cve-2026-46215
[2] https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html
[3] https://access.redhat.com/security/cve/cve-2026-64600

Kind regards
Konrad

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
OBBA/230
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch

[[Linux-announce] ] more kernel vulnerabilities for gaining root access, Konrad Bucheli (PSI), 07/24/2026