One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

A one-character flaw in the Linux kernel's nf_tables packet-filtering code enables unprivileged users to escalate to root and escape containers.

• •CVE-2026-23111 is a use-after-free vulnerability patched on February 5, 2026, with CVSS score 7.8
• •Public exploits are available from FuzzingLabs (April) and Exodus Intelligence (June)
• •The vulnerability requires nf_tables enabled and unprivileged user namespaces, both common defaults
• •It is local-only and demands an initial foothold before exploitation
• •Affects Ubuntu 22.04/24.04, Debian Bookworm/Trixie, RHEL 10, and other distributions

This summary was automatically generated by AI based on the original article and may not be fully accurate.