CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Acronis Backup Plugins Local Privilege Escalation Advisory (CVE-2026-87886) - cPanel, Plesk, DirectAdmin
[Affected Scope] Acronis Backup plugins for Linux-based hosting panels (cPanel, Plesk, DirectAdmin) prior to specific builds.
[Impact] Local attackers can exploit insecure file permissions to gain root-level privileges on the host server, leading to full system compromise.
[Mitigation] Immediate update to the latest plugin versions (cPanel 1.9.3.1021+, Plesk 1.8.11.638+, DirectAdmin 1.2.3.238+).
Linux Kernel IPv6 Socket Memory Corruption Vulnerability (CVE-2026-53362) Analysis and Mitigation Guide
[Affected Scope] Linux kernel systems utilizing UDPv6 sockets with MSG_MORE and MSG_SPLICE_PAGES flags
[Impact] Unprivileged local users can trigger a heap out-of-bounds write, leading to system crash (Denial of Service) or Local Privilege Escalation (LPE)
[Mitigation] Apply the latest stable kernel patches from upstream or your Linux distribution vendor, and restrict unprivileged user namespaces if immediate patching is not feasible
Linux Kernel Netfilter Bridge ebt_snat ARP Rewrite Vulnerability (CVE-2026-53266)
[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.
[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.
[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.
Linux Kernel Memory Corruption via Missing Shared-Frag Marker in skbuff (CVE-2026-46300)
[Affected Scope] Linux kernel network stack (skbuff) and systems utilizing IPsec (ESP).
[Impact] Local attackers can exploit the packet coalescing process to overwrite kernel memory (e.g., page cache), potentially leading to privilege escalation.
[Mitigation] Immediately apply the latest kernel security patches provided by your distribution and reboot the system.
Linux Kernel algif_aead In-place Operation Vulnerability Leading to Local Privilege Escalation (CVE-2026-31431)
[Affected Scope] Systems running Linux kernel with the `algif_aead` crypto subsystem module enabled.
[Impact] A local attacker can exploit this vulnerability to cause kernel memory corruption, potentially leading to local privilege escalation (LPE) to root or system instability (Kernel Panic).
[Mitigation] Apply the latest stable kernel updates from your distribution or disable the `algif_aead` socket module if not required.
Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)
[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.
[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.
[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.
Linux Kernel TLS Zero-Length Record Handling Vulnerability (CVE-2025-39682) Advisory
[Affected Scope] Linux systems utilizing in-kernel TLS (ktls) offload or software implementation.
[Impact] Remote attackers can trigger memory corruption or kernel panic, potentially leading to full system compromise (RCE).
[Mitigation] Immediately update the Linux kernel to the latest stable version provided by your distribution.
Linux Kernel watch_queue Subsystem Out-of-Bounds Write Vulnerability (CVE-2022-0995) Advisory
[Affected Scope] Linux kernel versions from 5.8 up to 5.17-rc8 utilizing the watch_queue event notification subsystem.
[Impact] A local unprivileged attacker can overwrite kernel state memory, potentially leading to local privilege escalation (LPE) to root or system denial of service (DoS).
[Mitigation] Apply the latest kernel security patches immediately, or restrict unprivileged user namespaces as a temporary mitigation.
Linux Kernel cgroups v1 Container Escape and Privilege Escalation Vulnerability (CVE-2022-0492)
[Affected Scope] Container environments and host OS running Linux kernel versions prior to v5.17-rc3
[Impact] An attacker inside a container can bypass namespace isolation, escalate privileges to host root, and execute arbitrary code
[Mitigation] Update the Linux kernel to the patched version, and enforce container security profiles (AppArmor, Seccomp, non-root users)