Linux Kernel fixes an LPE vulnerability

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Linux Kernel fixes an LPE vulnerability

Linux fixes an LPE vulnerability in the kernel [1]. The fix was released in the form of a patch at [2]. The kernel vulnerability has been present since commit 14a4696bc311 [2] and at least since version 5.14 [3], but due to backporting the vulnerability may also be present in older versions.

Linux Kernel - LPE

CVSS 7.8 (High)

An authenticated local attacker can, due to an incorrect socket closing procedure, access memory after it has been freed and thereby escalate their privileges to root [1].

CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

CWE-416: Use After Free at cwe.mitre.org

The vulnerability was publicly disclosed 15. 7. 2026.

Links

By CESNET, z.s.p.o. Martin Krajči on 17. 7. 2026.

Report feedback

[TLP:CLEAR] Linux Kernel fixes an LPE vulnerability

Linux Kernel - LPE

CVSS 7.8 (High)

Links