Critical Linux Kernel Flaws Expose Systems to Privilege Escalation and Data Leaks
Multiple high-severity vulnerabilities in the Linux kernel affect major architectures and cloud environments. Patches address flaws enabling privilege escalation, data exposure, and container escapes.
TL;DR
- AMD processor flaws allow local attackers to access sensitive data or escalate privileges.
- Socket buffer fragmentation bugs (Fragnesia, Dirty Frag) enable container escapes and privilege escalation.
- Flaws impact multiple architectures including x86, ARM64, RISC-V, and cloud-specific kernels.
- NTFS filesystem vulnerability can leak kernel memory via malicious images.
- Patches released across Ubuntu security notices for various kernel variants.
A series of critical vulnerabilities have been identified and patched in the Linux kernel, affecting a wide range of hardware platforms and cloud-specific distributions. These flaws span from architectural weaknesses in AMD processors to complex logic errors in kernel networking subsystems, each posing significant risk to system integrity and confidentiality.
The vulnerabilities enable local attackers to escalate privileges, access sensitive kernel memory, or even escape containerized environments. Many of these issues stem from low-level interactions between hardware and kernel components, making them particularly challenging to detect and mitigate without proper patching.
AMD Processor Vulnerabilities
- CVE-2025-54505: Some AMD processors fail to clear data in the floating point divider during speculative execution, allowing local attackers to read sensitive information.
- CVE-2025-54518: AMD Zen 2 processors lack proper isolation of shared resources in the operation cache, which may lead to instruction corruption and privilege escalation.
- CVE-2025-62626: AMD Zen 5 processors using RDSEED instruction may produce insufficiently random values, compromising cryptographic security.
Kernel Memory and Privilege Escalation Risks
- CVE-2023-45896: The NTFS file system implementation contains an out-of-bounds read vulnerability that can expose kernel memory through crafted NTFS images.
- CVE-2026-43503 (Fragnesia): Logic flaw in XFRM ESP-in-TCP subsystem allows local attackers to escalate privileges or escape containers.
- CVE-2026-43284: Shared page fragment handling issues in socket buffers (Dirty Frag) can be exploited for privilege escalation or container breakout.
- Multiple subsystems affected including block layer, cryptographic API, network drivers, and file systems across different kernel variants.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.