It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local attacker could use this to expose sensitive information. (CVE-2017-5967) Wen Xu discovered that the XFS file system implementation in the Linux kernel did not properly track inode validations.
USN-8924-1: Linux kernel vulnerabilities
About this summary. This is a short, independently written summary of an article first published by Ubuntu Security. Cyber Security News did not report or verify the underlying story. Read the original: https://ubuntu.com/security/notices/USN-8924-1
Source attribution: headline and facts are from Ubuntu Security (ubuntu.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization…
No, Your Tools Are Not Enough: It's Time to Bring Agents to the Hunt
arXiv:2610.14729v1 Announce Type: new Abstract: Modern software systems are large and complex, demanding scalable and autonomous techniques for vulnerability discovery…
Chrome for Android Update
Hi, everyone! We've just released Chrome 155 (155.0.8059.79) for Android. It'll become available on Google Play over the next few days.
Stable Channel Update for Desktop
The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of…
Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
Serial Number:AV26-1038 Date: October 13, 2026 As of October 13, 2026, Microsoft is affected by vulnerabilities in the following products: .NET 10.0 .NET 11.0 .NET 8.0…
USN-8918-1: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with…