Critical OVSwrap Flaw in Linux Kernel Allows Local Root Access

Securityaffairs.Co

Critical OVSwrap Flaw in Linux Kernel Allows Local Root Access

First seen 5 Aug 2026, 15:41 UTC • •69.0

Article Content

1 / 6

Browse articles

ThreatCluster •August 6, 2026 at 15:40 UTC

•OVSwrap (CVE-2026-64531) allows local users to escalate privileges to root on Linux systems.
•A public exploit exists, impacting around 800 x86-64 kernel builds, raising detection concerns.
•The vulnerability was disclosed on July 27, 2026, with a CVSS score of 7.8, indicating high severity.

A 13-year-old vulnerability, CVE-2026-64531, known as OVSwrap, has been disclosed, allowing local users to gain root privileges on various Linux distributions using Open vSwitch. Security researcher Asim Manizada revealed that the flaw affects a wide range of systems and has a CVSS score of 7.8. A public exploit is available, which includes offsets for approximately 800 x86-64 kernel builds. The exploit can be triggered even when Open vSwitch is idle, making detection difficult. This vulnerability poses a significant risk to systems running affected kernel versions. The flaw was published on July 27, 2026, with the first proof of concept released shortly after on July 29. Organizations using Linux distributions with Open vSwitch are urged to assess their systems for this vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 46d ago How this analysis works

Timeline

2026-07-27

CVE-2026-64531 published

The OVSwrap vulnerability in the Linux kernel was disclosed, allowing local privilege escalation.

Securityaffairs.Co

2026-07-29

First public PoC released

A proof of concept for exploiting the OVSwrap vulnerability was made public, increasing risk.

2026-08-05

OVSwrap vulnerability reported widely

Multiple cybersecurity outlets report on the OVSwrap flaw, emphasizing its impact and exploitability.

More articles in this cluster (5)

Threat Graph

8 entities, 11 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Privilege Escalation
Zero-day Exploit
T1068 - Exploitation for Privilege Escalation

Vulnerability (2)

CVE-2026-64531
OVSwrap

Weakness (1)

CWE-269 - Improper Privilege Management

Affected Platform (2)

Linux
Open VSwitch

Relationships

CVE-2026-64531 targets Linux
CVE-2026-64531 targets Open VSwitch
OVSwrap targets Linux
OVSwrap targets Open VSwitch
Privilege Escalation targets Linux
Privilege Escalation targets Open VSwitch
Zero-day Exploit targets Linux
Zero-day Exploit targets Open VSwitch
T1068 - Exploitation for Privilege Escalation targets Linux
T1068 - Exploitation for Privilege Escalation targets Open VSwitch
CVE-2026-64531 related to CWE-269 - Improper Privilege Management

Following this threat?

Track CVE-2026-64531 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Linux Kernel Vulnerabilities Affecting Ubuntu Systems Multiple critical vulnerabilities have been discovered in the Linux kernel affecting Ubuntu systems, particularly in versions 24.04 and 26.04 LTS. The vulnerabilities include CVE-2025-10263, which allows local attackers to bypass memory protections and escalate privileges on affected Arm and AMD processors. The issues…

Public Exploits for Four Critical Linux Kernel Flaws Released Four vulnerabilities in the Linux kernel, named DirtyAH6, TUNderflow, PPPoEject, and DiagSpill, have been publicly disclosed, allowing local users to escalate privileges to root. These flaws, tracked as CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, and CVE-2026-74469, were discovered by researcher Asim Manizada and…