NewsBleepingComputer
Linux kernel exploit enables remote root attacks on MPTCP servers
Teaser from the source
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on enables
Other advisories
- HighCVE-2026-62848Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
- HighCVE-2026-62848Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
- Not ratedosv:CVE-2026-121543smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation
- Not ratedosv:CLEANSTART-2023-DU60318integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021
- Not ratedosv:CLEANSTART-2023-AZ97315file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021
- Not ratedosv:CLEANSTART-2023-HW88932invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021
- Not ratedosv:CLEANSTART-2024-DF62846X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain
- MediumCVE-2026-109821Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
Other news entries
- Why continuous governance, not periodic reviews, is the new standard for identity securityNewsCSO Online
- The days of assuming another company’s breach is someone else’s problem are overNewsCSO Online
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseNewsMicrosoft Threat Intelligence
- Why TLP should not replace your internal information classification, (Sat, Oct 10th)NewsSANS ISC Diary
- Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCENewsThe Hacker News
- SWIFT Banking & Government Middleware Enables RCENewsDark Reading
- Microsoft enables Windows settings backup by default for orgsNewsBleepingComputer
- On-prem VeloCloud Orchestrator under attack, only some versions patchedNewsCSO Online
ID