https://vulnerability.circl.lu/sightings/feed 2026-08-05T20:37:31.323029+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/29583760-41bc-4b7a-b91e-e1048f125779/export 2026-08-05T20:37:31.345390+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "29583760-41bc-4b7a-b91e-e1048f125779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3msdv3zgv422c", "content": "OVSwrap (CVE-2026-64531, CVSS 7.8) lets an ordinary local user reach root through the Linux Open vSwitch datapath on most default distros.", "creation_timestamp": "2026-08-05T15:53:01.169353Z"} 2026-08-05T15:53:01.169353+00:00 https://vulnerability.circl.lu/sighting/ca18308f-e8cf-4dbc-b1c5-4a42bec09de4/export 2026-08-05T20:37:31.348335+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca18308f-e8cf-4dbc-b1c5-4a42bec09de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64531", "type": "seen", "source": "https://infosec.exchange/ap/users/116810780845358081/statuses/117043679182954086", "content": "A 13-year-old bug buried deep inside the Linux kernel has quietly become one of the most interesting privilege escalation vulnerabilities disclosed this year.\nOVSwrap (CVE-2026-64531) affects the Open vSwitch kernel datapath and can allow an unprivileged local user to gain root privileges on many Linux distributions under common configurations.\nWhat makes this vulnerability particularly noteworthy isn't just the bug itself. The vulnerable code had existed for over a decade, but a seemingly unrelated change in 2025 removed a size limit that had unknowingly prevented it from being exploited. Once that guard disappeared, a dormant integer truncation bug became a reliable kernel memory corruption vulnerability.\nThe public proof-of-concept is equally impressive from a research perspective. It supports roughly 800 x86-64 kernel builds, avoids traditional heap grooming techniques, and demonstrates a deterministic path from a local user account to root by abusing a 16-bit Netlink length wraparound in the Open vSwitch datapath.\nI put together a deep technical analysis covering the vulnerability from the kernel internals upward, including the root cause, why it remained hidden for 13 years, how the exploit chain works, affected distributions, upstream fixes, and practical mitigation guidance.\n\ud83d\udd17 Read the full analysis:\nhttps://thecybersecguru.com/news/ovswrap-cve-2026-64531-linux-kernel-openvswitch-root-vulnerability/\nWhat are your thoughts on unprivileged user namespaces? Should distributions continue enabling them by default, or is the growing kernel attack surface becoming too difficult to justify?\n#Linux #LinuxKernel #OpenvSwitch #CyberSecurity #InfoSec #KernelSecurity #Vulnerability #Exploit #CVE #DevSecOps", "creation_timestamp": "2026-08-05T15:47:27.619052Z"} 2026-08-05T15:47:27.619052+00:00 https://vulnerability.circl.lu/sighting/b1576cb5-e1b6-48f8-90f9-f2b49637f452/export 2026-08-05T20:37:31.348458+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b1576cb5-e1b6-48f8-90f9-f2b49637f452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64531", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3msdum5qwfe2u", "content": "OVSwrap (CVE-2026-64531): How a 13-Year-Old Open vSwitch Bug Became a Reliable Linux Root\u00a0Exploit\n\nOVSwrap (CVE-2026-64531) is a Linux kernel privilege escalation flaw affecting Open vSwitch.\u2026\n\nhttps://thecybersecguru.com/news/ovswrap-cve-2026-64531-linux-kernel-openvswitch-root-vulnerability/", "creation_timestamp": "2026-08-05T15:44:07.458728Z"} 2026-08-05T15:44:07.458728+00:00 https://vulnerability.circl.lu/sighting/92d077a6-b24f-49ec-a737-624b1f9c4b8b/export 2026-08-05T20:37:31.348537+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "92d077a6-b24f-49ec-a737-624b1f9c4b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msdt4gnkio2u", "content": "OVSwrap (CVE-2026-64531) lets an ordinary local user get root on most default Linux distros through the Open vSwitch kernel module.\n\nYou do not need to run Open vSwitch to be exposed. A public exploit targets ~800 kernel builds.\n\nPatch the kernel now.", "creation_timestamp": "2026-08-05T15:17:27.090137Z"} 2026-08-05T15:17:27.090137+00:00 https://vulnerability.circl.lu/sighting/bd14ab94-2cbc-4e93-9007-8c9e0210a2a2/export 2026-08-05T20:37:31.348619+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bd14ab94-2cbc-4e93-9007-8c9e0210a2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msdqeuc7wt2q", "content": "\ud83e\udd16 CVE-2026-64531 (CVSS 7.8): OVSwrap \u2014 memory corruption in the Linux kernel's Open vSwitch datapath gives local users root. Public exploit with pre-built records for ~800 kernel builds.\nhttps://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html", "creation_timestamp": "2026-08-05T14:28:38.744162Z"} 2026-08-05T14:28:38.744162+00:00 https://vulnerability.circl.lu/sighting/41ef9151-48a1-466c-918f-5a79d111b0e6/export 2026-08-05T20:37:31.348696+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "41ef9151-48a1-466c-918f-5a79d111b0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msdqc7m6hv2n", "content": "Linux\u30ab\u30fc\u30cd\u30eb\u306eOpen vSwitch\u306b\u3001\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u304croot\u6a29\u9650\u3092\u53d6\u5f97\u3067\u304d\u308b\u8106\u5f31\u6027\uff08CVE-2026-64531\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u60aa\u7528\u3059\u308b\u3068\u3001\u5e83\u7bc4\u306a\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u3067root\u6a29\u2026", "creation_timestamp": "2026-08-05T14:27:14.698341Z"} 2026-08-05T14:27:14.698341+00:00 https://vulnerability.circl.lu/sighting/ecb40913-1cba-43e9-8fa4-d2249b5cb590/export 2026-08-05T20:37:31.348797+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ecb40913-1cba-43e9-8fa4-d2249b5cb590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3msdmgjg7is2e", "content": "MT @thehackernews.bsky.social \n\nThe 13-year-old OVSwrap flaw (CVE-2026-64531) can let unprivileged local users gain root through Open vSwitch on affected systems.\n\nThe public PoC includes offsets for roughly 800 x86-64 kernel builds.\n\nPatch or block the module: thehackernews.com/2026/08/new-...", "creation_timestamp": "2026-08-05T13:17:56.327787Z"} 2026-08-05T13:17:56.327787+00:00 https://vulnerability.circl.lu/sighting/64942337-9c5a-4345-b23f-94770ad6a7a6/export 2026-08-05T20:37:31.348868+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "64942337-9c5a-4345-b23f-94770ad6a7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html", "content": "A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds.\n\nThe vulnerability, tracked as CVE-2026-64531 (CVSS score: 7.8) and codenamed OVSwrap by its discoverer, was disclosed by security researcher Asim", "creation_timestamp": "2026-08-05T13:00:35.912742Z"} 2026-08-05T13:00:35.912742+00:00 https://vulnerability.circl.lu/sighting/4b59ab4e-609b-4678-b803-bc2a3206be8c/export 2026-08-05T20:37:31.348940+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4b59ab4e-609b-4678-b803-bc2a3206be8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9714", "content": "\ud83d\uded1 A Linux kernel root exploit is now public.\n\nThe 13-year-old OVSwrap flaw (CVE-2026-64531) can let unprivileged local users gain root through Open vSwitch on affected systems.\n\nThe public PoC includes offsets for roughly 800 x86-64 kernel builds.\n\nPatch or block the module: https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html", "creation_timestamp": "2026-08-05T13:00:05.430393Z"} 2026-08-05T13:00:05.430393+00:00 https://vulnerability.circl.lu/sighting/99a5bfb8-77f4-429a-a04d-eedf204d66a0/export 2026-08-05T20:37:31.349017+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "99a5bfb8-77f4-429a-a04d-eedf204d66a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64531", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msdl5ygts22w", "content": "\u65b0\u305f\u306b\u767a\u899a\u3057\u305fOVSwrap\u306e\u6b20\u9665\u3001\u6a29\u9650\u3092\u6301\u305f\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u30ab\u30fc\u30cd\u30eb\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u7834\u58ca\u3057root\u3092\u596a\u53d6\u53ef\u80fd\u306b\n\n\u300cOVSwrap\u300d(CVE-2026-64531)\u3068\u540d\u4ed8\u3051\u3089\u308c\u305f\u65b0\u305f\u306aLinux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u3092\u6301\u305f\u306a\u3044\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u304cOpen vSwitch\u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb\u5185\u306e\u6574\u6570\u306e\u30e9\u30c3\u30d7\u30a2\u30e9\u30a6\u30f3\u30c9\u30d0\u30b0\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u5b8c\u5168\u306aroot\u6a29\u9650\u306b\u307e\u3067\u6607\u683c\u3067\u304d\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u308a\u307e\u3057\u305f\u3002 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u306eAsim...", "creation_timestamp": "2026-08-05T12:55:08.196078Z"} 2026-08-05T12:55:08.196078+00:00