Critical Tails Linux Vulnerability Exposes Users to Deanonymization Risks

Tails Linux has released an emergency patch for a critical kernel vulnerability (CVE-2026-64560) that could allow malicious websites to deanonymize users. The flaw, present since Linux kernel version 5.7, enables attackers to gain administrator privileges through the Tor Browser. While the likelihood of exploitation is low, it poses significant risks to high-value targets like activists and journalists. Users are urged to upgrade to version 7.10.1 immediately to mitigate these risks. The update also addresses vulnerabilities in the expat XML library that could allow similar exploits through other applications. No known attacks have been reported in the wild, but the potential for exploitation by sophisticated attackers remains a concern. Tails can be upgraded automatically or manually, but users must be cautious to preserve any persistent storage on USB drives.

Key Points: • Tails Linux released version 7.10.1 to fix a critical kernel vulnerability (CVE-2026-64560). • The vulnerability allows malicious websites to potentially deanonymize users by gaining admin access. • Users are advised to upgrade immediately; no known active exploitation has been reported.