Skip to content
Severe Unpatched Linux Kernel Vulnerabilities Exposed Publicly

Severe Unpatched Linux Kernel Vulnerabilities Exposed Publicly

First seen 23 Oct 2026, 22:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 22:44 UTC
  • •Accidental public disclosure of severe Linux kernel vulnerabilities.
  • •Vulnerabilities include CVSS scores of 9.0, indicating critical risks.
  • •Patches are in testing or beta branches, but mainline kernel remains unpatched.

A list of unpatched Linux kernel vulnerabilities was accidentally posted to a public mailing list, with some vulnerabilities scoring as high as 9.0 on the CVSS scale. The incident was reported by Phoronix, noting that the vulnerabilities originated from Trend Micro's Zero Day Initiative. Greg Kroah-Hartman, a key figure in Linux kernel maintenance, responded to the reports, emphasizing the need for a review of the submission process. The vulnerabilities include remote code execution and local privilege escalation risks, with several patches in testing or queued for beta branches. Affected vulnerabilities include ZDI-CAN-33549 and ZDI-CAN-33774, both rated at CVSS 9.0. The exposure of these vulnerabilities raises significant security concerns for Linux users, particularly those not using beta branches that may have patches available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
Vulnerabilities posted to public mailing list
A list of unpatched Linux kernel vulnerabilities was accidentally shared on a public mailing list, exposing critical security risks.
Rss.Slashdot
2026-10-23
Public warning issued
PC Gamer reported on the vulnerabilities, urging users to consider migrating to beta branches for potential patches.
Pcgamer

More articles in this cluster (2)

Extracted Entities (11)

1 / 3

Common questions

Which Linux kernel versions are affected?
The articles do not specify exact versions, but they indicate that the vulnerabilities affect the main Linux kernel.
Are these vulnerabilities being exploited in the wild?
No confirmed exploitation has been reported; the vulnerabilities are disclosed but remain unpatched.
What should Linux users do now?
Users are advised to check if their distro has patches available in beta branches and consider migrating to those for enhanced security.