Index
Search
Search the public record. Drafts and scheduled notes are not included.
High
news
Infinity Core: Linux kernel exec timer bug CVE-2026-98260 has a public root PoC
Researcher Hyunwoo Kim disclosed CVE-2026-98260, a Linux kernel use-after-free in POSIX CPU timer cleanup after a failed exec(). He says it gives local root and container escape. Kernels from 5.7 are affected. Fixed in 6.6.158, 6.12.112, 6.18.54 and 7.2.8. CVSS 3.1 7.8. Public PoC. Not in CISA KEV.
Published 4h ago
HighPoC Available
CVE-2026-98260
Linux kernel exec POSIX CPU timer use-after-free (Infinity Core)
LPE
Published 13d ago