Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2026-68138 [High]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-68138.

Vendor
Linux
Product
Linux kernel
Affected versions
Linux 5.1 through 7.1.5; 7.2-rc1 through rc4
CVSS
7.8
Coverage Span
2026-08-11
Reports
1 related reports

Associated Reports & Timeline

1.
A PoC for CVE-2026-68138, a race in Linux qdisc rate-table code causing use-after-free or double-free; validated in QEMU, it escalates an ordinary process to root on vulnerable kernels.
Why it matters: The public PoC turns the kernel race into a reproducible local root-escalation chain. It requires specific kernel configuration and an isolated lab, but hosts exposing the relevant namespace, traffic-control, and module-loading capabilities should verify that the upstream fix or an equivalent backport is present.