Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header(). Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This can happen when a send is blocked in copy_from_user() while the first non-Ethernet port is added to an empty team device. The team's delegated GRE header callback then expands the skb head. PPPoE subsequently writes six bytes through the stale pointer into the freed head. Reload the PPPoE header through the skb's network-header offset after device header creation. pskb_expand_head() updates that offset when it relocates the head.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
Cuatro fallos en el núcleo de Linux permiten acceso root Se han revelado cuatro nuevas vulnerabilidades en el núcleo de Linux ( CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 y CVE-2026-74469 ) https://blog.elhacker.net/2026/09/cuatro-fallos-en-el-nucleo-de-linux.html
Four Linux local-root vulns published with working PoCs. DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121), DiagSpill (CVE-2026-74469). Write-up + exploits dropped after coordinated disclosure. https://heyitsas.im/posts/lpe-quartet/ https://www.openwall.com/lists/oss-security/2026/09/18/3 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #KernelSecurity #PrivilegeEscalation
🚨 Linux kernel'de 4 kritik LPE açığı için public exploit yayınlandı! CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 ve CVE-2026-74469 için çalışan PoC / Exploit github üzerinden yayınlandı. Açıklar; IPsec AH6, TUN/TAP, PPPoE ve SCTP bileşenlerindeki bellek güvenliği hatalarından kaynaklanıyor ve yerel kullanıcıların root yetkisine yükselmesine olanak sağlıyor. 🔴 CVE-2026-74469: 8.8 CVSS 🔴 CVE-2026-81000: 7.8 CVSS 🔴 CVE-2026-68121: 7.8 CVSS ⚠️ CVE-2026-80844: CVSS analizi bekliyor İlk 3 açıkta unprivileged user namespace gerekiyor. CVE-2026-74469 ise bu gereksinime sahip değil. 👉 PoC / Exploit'ler şöyle: DirtyAH6 — CVE-2026-80844: https://github.com/manizada/DirtyAH6 TUNderflow — CVE-2026-81000: https://github.com/manizada/TUNderflow PPPoEject — CVE-2026-68121: https://github.com/manizada/PPPoEject DiagSpill — CVE-2026-74469: https://github.com/manizada/DiagSpill Şu ana kadar aktif saldırılarda kullanıldığına dair doğrulanmış bir bulgu bulunmuyor. Public exploit yayınlandığı için güncel kernel/security update'lerinin uygulanması mutlaka gerekli.
いきなり4つのLPEのPoCが公開されている Red hatにメールで報告済み 緩和策 CVE-2026-80844 (DirtyAH6): The vulnerability requires the IPv6 AH6/XFRM path. On systems where IPv6 is not required, IPv6 can be disabled at boot: grubby --update-kernel=ALL --args="ipv6.disable=1" A reboot is required. CVE-2026-81000 (TUNderflow): On systems that do not require TUN/TAP, the tun kernel module can be disabled: echo "install tun /bin/true" > /etc/modprobe.d/disable-tun.conf CVE-2026-68121 (PPPoEject): On systems that do not require PPPoE, the pppoe kernel module can be disabled: echo "install pppoe /bin/true" > /etc/modprobe.d/disable-pppoe.conf CVE-2026-74469 (DiagSpill): On systems that do not require SCTP, the sctp kernel module can be disabled: echo "install sctp /bin/true" > /etc/modprobe.d/disable-sctp.conf https://seclists.org/oss-sec/2026/q3/822
9/18以降に追っているのは正確にはLPE 8件です。 CVE-2026-80844 CVE-2026-81000 CVE-2026-68121 CVE-2026-74469 CVE-2026-74753 CVE-2026-52910 CVE-2026-80521 CVE未採番：RustyTux / strparser・ESP-in-TCP race LPE 9/23まで、これ全部緩和策がわかるものとRed hatに報告した。異常すぎる密度だよ。
red hatで正式に受理されてる。 緩和策は専用ページに合ったはず。 Hi OS開発者, Your request PSIRTSUPT-24215: Public LPE PoCs for CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469 has been resolved. This request is now closed. If you have a new security concern or need further assistance, please reach out to us using one of the following options: • Initiate a new email thread to: secalert@redhat.com • Create a new request directly from the Jira portal: https://redhat.atlassian.net/servicedesk/customer/portal/68 Please note: Do not reply to this thread for new issues, as it has already been closed Thank you, Red Hat Product Security
CVE-2026-68121 - Linux kernel pppoe_sendmsg() use-after-free via reallocated skb header. Potential memory corruption. CVSS N/A, unpatched. Update kernels once fixed. https://www.valtersit.com/cve/CVE-2026-68121 #CVE #Linux #infosec #infosec #cybersecurity #CVE #Linux #infosec #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian
Post summary
The post announces a use‑after‑free flaw in the Linux kernel's pppoe_sendmsg function, describing memory corruption details and advising kernel updates. No PoC, exploit, or active exploitation information is supplied.
Bir Araştırmacı, Yapay Zeka Yardımıyla Bulduğu Dört Linux Çekirdeği Açığı İçin Çalışan İstismar Kodunu Yayınladı! Güvenlik araştırmacısı Asim Manizada, yapay zeka destekli bir süreçle bulduğunu belirttiği dört Linux çekirdeği açığı için (DirtyAH6/CVE-2026-80844, TUNderflow/CVE-2026-81000, PPPoEject/CVE-2026-68121, DiagSpill/CVE-2026-74469) çalışan istismar kodunu kamuya yayınladı; hepsi çekirdeğin ağ kodunda bulunan bellek güvenliği açıkları ve yerel kullanıcılara root erişimi sağlıyor. • Açıklar sırasıyla IPv6 IPsec AH kodu, TUN/TAP sanal ağ cihazları, PPPoE kodu ve SCTP tanı kodunda bulunuyor; ilk tam düzeltmeler 5.10.270'ten 7.2.4'e kadar çeşitli çekirdek sürümlerinde mevcut. • Henüz gerçek saldırılarda kullanıldığına dair kanıt yok, ancak çalışan istismar kodunun kamuya açık hale gelmesi eski çekirdek çalıştıran sistemler için riski artırıyor. Tek bir araştırmacının yapay zeka yardımıyla aynı anda dört farklı çekirdek açığı bulup istismar kodu yazabilmesi, güvenlik açığı keşfinin hızının yapay zeka araçlarıyla ne kadar arttığını, savunma tarafının da aynı hızla yama uygulaması gerektiğini gösteriyor. #SiberGüvenlik #Linux #YapayZeka
News: Asim Manizada published local-root PoCs for four Linux kernel bugs (CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, CVE-2026-74469). Hits unpatched multi-user hosts. Patch to a fixed kernel (6.12.109+ or your distro advisory). https://www.infosectoday.io/public-exploits-released-for-four-linux-kernel-flaws-that-enable-local-root/
News: Four Linux kernel bugs give local root: DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121), DiagSpill (CVE-2026-74469). Hits many kernels. Update to 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109, 6.18.50, or 7.2.4. https://www.openwall.com/lists/oss-security/2026/09/18/3