🟠 High | Source: The Hacker News
A Linux kernel vulnerability (CVE-2026-53264) in the network traffic-control subsystem allows a local unprivileged user to gain full root access via a use-after-free race condition. The researcher who discovered it used AI tooling to both identify the flaw and accelerate exploit development, lowering the bar for future similar research. CentOS Stream 9 is confirmed affected, and the 7.8 CVSS score reflects the high impact despite requiring local access.
Security Architect’s Take: Prioritise patching CentOS Stream 9 and any Red Hat-derived Linux instances in your cloud estate — particularly where multi-tenant workloads or container breakout risks exist. Enforce strict least-privilege controls and consider restricting unprivileged user namespaces (e.g. via sysctl kernel.unprivileged_userns_clone=0) as a short-term mitigation until a patch is applied.
Original advisory: Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit