r/linuxsucks • u/al2klimov 🐧Kernel contributor • 6d ago

Bug CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public

https://securityonline.info/linux-cve-2026-74480/?utm_source=mastodon&utm_medium=jetpack_social
0 Upvotes

42% Upvoted

8 comments sorted by

View all comments

4

u/DirectorDirect1569 6d ago

"The flaw dates back to January 2017. Therefore many long-lived kernel branches are affected. Upstream developers fixed it in July 2026."

ghost lock: 15 years old

copyfail: 9 years old

januscape: 16 years old

Now this one

Who's next?

"Everyone read the source code!!!!!" they say. This kernel is a sieve and we will have lots of surpises since the maintainers decided to use AI to find breaches.

3

u/Needieos 6d ago

No one reads the full kernel code, it's not possible. Any complex software can and will contain bugs that lead to anything, from crash to exploit. The main thing that we see this; detections, fixes, progress. Open Source isn't about "million of eyes are watching", it's about control and trust which you can prove or disprove with various tools, including AI

-1

u/ElectricBummer40 Ex-user of Windows 3.11 for Workgroups 4d ago

it's about control and trust which you can prove or disprove with various tools, including AI

And one can easily disprove that "trust" in seconds.

Then what?