新的OVSwrap Linux内核缺陷允许本地用户获取root权限

لماذا يهم هذا الخبر؟

Linux内核的Open vSwitch数据路径存在内存泄漏，可能导致普通本地用户绕过安全措施直接获得系统最高权限。漏洞存在于多个默认配置的操作系统版本中，并已附带一个公开的exploit。大约800个内核构建记录已经预建并可利用。

سياق الخبر

A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS score: 7.8) and codenamed OVSwrap by its discoverer, was disclosed by security researcher Asim

فتح الخبر الأصلي