---
id: 6542
title: "CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation"
cve: CVE-2026-68138
cvss: 7.8
vendor: "Linux"
product: "Linux kernel"
affected_versions: "Linux 5.1 through 7.1.5; 7.2-rc1 through rc4"
source_domain: github.com
source_url: "https://github.com/aramosf/cve-2026-68138"
published_at: "2026-08-11T22:22:22Z"
tags: ["public-poc", "kernel-security", "privilege-escalation", "use-after-free", "linux-kernel", "exploit", "poc", "race-condition", "cve-2026-68138"]
phying_url: "https://phying.com/item/6542"
lang: en
---

# CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation

## Summary

A PoC for CVE-2026-68138, a race in Linux qdisc rate-table code causing use-after-free or double-free; validated in QEMU, it escalates an ordinary process to root on vulnerable kernels.

## Why it matters

The public PoC turns the kernel race into a reproducible local root-escalation chain. It requires specific kernel configuration and an isolated lab, but hosts exposing the relevant namespace, traffic-control, and module-loading capabilities should verify that the upstream fix or an equivalent backport is present.

## Intelligence Metadata

- **Sources:** github.com
- **CVE:** CVE-2026-68138
- **CVSS:** 7.8
- **Vendor:** Linux
- **Product:** Linux kernel
- **Affected versions:** Linux 5.1 through 7.1.5; 7.2-rc1 through rc4
- **Published:** 2026-08-11T22:22:22Z
- **Original:** https://github.com/aramosf/cve-2026-68138
- **Phying News:** https://phying.com/item/6542