Kernel Security Archives • Daily CyberSecurity

OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata

OpenBSD 8.0 release architecture showing kernel hardening and day-one security errata

OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata

Do Son October 23, 2026

The OpenBSD 8.0 release brings OpenSSH 10.6, kernel mitigations, and immediate day-one errata patches addressing critical IPsec memory corruption.

Full Details and PoC Exploit Released for 37-Year-Old OpenBSD Kernel Bug That Grants Root OpenBSD kernel vulnerability local privilege escalation PoC exploit published by Calif

OpenBSD kernel vulnerability local privilege escalation PoC exploit published by Calif

Full Details and PoC Exploit Released for 37-Year-Old OpenBSD Kernel Bug That Grants Root

Do Son October 20, 2026

Calif released details and PoC code for an OpenBSD kernel vulnerability enabling local privilege escalation to root. Apply errata 018 and 026.

Windows 11 Memory Integrity Goes On by Default in October Windows 11 memory integrity (HVCI) enabled by default to protect the kernel using hardware virtualization

Windows 11 memory integrity (HVCI) enabled by default to protect the kernel using hardware virtualization

Windows 11 Memory Integrity Goes On by Default in October

Do Son September 2, 2026

From October 2026, Windows 11 memory integrity (HVCI) turns on by default on eligible devices, hardening the kernel at a modest cost to gaming performance.

FreeBSD Patches Eight Kernel Vulnerabilities FreeBSD security advisories patching eight kernel vulnerabilities including use-after-free local privilege escalation flaws CVE-2026-58090

FreeBSD security advisories patching eight kernel vulnerabilities including use-after-free local privilege escalation flaws CVE-2026-58090

FreeBSD Patches Eight Kernel Vulnerabilities

Do Son August 26, 2026

FreeBSD patched 8 vulnerabilities on August 25, 2026, mostly local privilege escalation flaws plus a ppp code execution bug. Update now.

BTR.sys Driver Abuse Turns Defender Into an EDR/AV Bypass Diagram of BTR.sys driver abuse showing the signed Defender remediation driver used as an EDR/AV bypass kernel primitive

Diagram of BTR.sys driver abuse showing the signed Defender remediation driver used as an EDR/AV bypass kernel primitive

BTR.sys Driver Abuse Turns Defender Into an EDR/AV Bypass

Do Son August 25, 2026

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

Linux Kernel 7.2 Arrives with Extensive Updates Linux Kernel 7.2 release graphic showing hardware driver and security updates

Linux Kernel 7.2 Arrives with Extensive Updates

Do Son August 18, 2026

Following extensive testing, Linux Kernel 7.2 is now available. Discover the latest updates regarding hardware drivers, file systems, and kernel security.

Debian 13 Kernel Update Fixes 68 Flaws, Four Rated Critical Debian 13 Linux kernel security update DSA-6405-1 fixing 68 vulnerabilities including four critical use-after-free flaws in net/sched, NVMe/TCP, and SMC-R

Debian 13 Linux kernel security update DSA-6405-1 fixing 68 vulnerabilities including four critical use-after-free flaws in net/sched, NVMe/TCP, and SMC-R

Debian 13 Kernel Update Fixes 68 Flaws, Four Rated Critical

Do Son August 3, 2026

Debian 13 pushes a kernel update fixing 68 vulnerabilities including four critical use-after-free flaws. Upgrade to kernel 6.12.100-1 and reboot now.

PoC Exploit Code Publicly Released: New “PinTheft” Linux Flaw Overwrites Page Cache for Instant Root PinTheft Linux Exploit Linux LPE PoC Disclosed

PinTheft Linux Exploit Linux LPE PoC Disclosed

PoC Exploit Code Publicly Released: New “PinTheft” Linux Flaw Overwrites Page Cache for Instant Root

Do Son May 20, 2026

Technical details and a working PoC exploit are public for PinTheft, a critical Linux local privilege escalation bug. Block the RDS module now.

Linux Kernel 7.0 Arrives: A Massive Overhaul for System Stability and Security Linus Torvalds AI bug reports Linux Kernel 7.0 Linux EFI Zboot - CVE-2022-42719 Linux KVM Intel AMX kernel panic, KVM guest host crash 2025

Linus Torvalds AI bug reports Linux Kernel 7.0 Linux EFI Zboot - CVE-2022-42719 Linux KVM Intel AMX kernel panic, KVM guest host crash 2025

Linux Kernel 7.0 Arrives: A Massive Overhaul for System Stability and Security

Do Son April 13, 2026

Linux Kernel 7.0 is here! The 2026 milestone focuses on hardware support, memory safety, and security fixes for x86, ARM64, and RISC-V architectures.

Code in the Wild: Full Technical Deep-Dive and Public GitHub PoC Released for Critical Linux TLS Root Exploit CIFSwitch local root exploit cifs-utils privilege escalation Linux Kernel Root Exploit CVE-2025-39946 PoC CVE-2023-2598 PoC Ubuntu LPE Vulnerability CVE-2026-3888

CIFSwitch local root exploit cifs-utils privilege escalation Linux Kernel Root Exploit CVE-2025-39946 PoC CVE-2023-2598 PoC Ubuntu LPE Vulnerability CVE-2026-3888

Code in the Wild: Full Technical Deep-Dive and Public GitHub PoC Released for Critical Linux TLS Root Exploit

Do Son March 25, 2026

Full disclosure: Technical details and a GitHub PoC for CVE-2025-39946 are live. This Linux TLS vulnerability allows root escalation via memory shaping.

Deep Kernel Fix: Linux Closes a 5-Year-Old Flaw in x86 Memory Handling Linux Kernel legacy driver removal Linux kernel x86 page fault, interrupt state asymmetry fix Linux ISO, false positive CVE-2023-6200 - Linux Kernel 6.12 LTS 6.14

Linux Kernel legacy driver removal Linux kernel x86 page fault, interrupt state asymmetry fix Linux ISO, false positive CVE-2023-6200 - Linux Kernel 6.12 LTS 6.14

Deep Kernel Fix: Linux Closes a 5-Year-Old Flaw in x86 Memory Handling

Do Son January 25, 2026

A 5-year-old flaw in Linux x86 page fault handling has finally been patched in Kernel 6.19. Discover how engineers fixed this "combinatorial nightmare."

Windows DWM Flaw Lets Local Users Paint Their Way to SYSTEM Privileges, PoC Publishes

HTTP.sys RCE vulnerability, Windows HTTP stack exploit, CVE-2026-47291 Netlogon RCE vulnerability Exploited in the wild Secure Boot certificate renewal 2026, Windows 11 UEFI update Community-First AI Infrastructure, Microsoft self-funding energy mandate aka.ms/aoh online portal CVE-2025-55681, Windows DWM Elevation Windows Administrator Protection, CVE-2025-60718 Microsoft AI Compute, IREN Infrastructure Microsoft Japan PPA, Renewable Energy Microsoft AI Investment, Cloud Expansion Microsoft Azure, Startup Credits Infinite Workday, AI in Work Microsoft Russia, Bankruptcy AI code generation, Microsoft AI Microsoft Layoffs, Restructuring

Windows DWM Flaw Lets Local Users Paint Their Way to SYSTEM Privileges, PoC Publishes

Do Son December 23, 2025

Microsoft patches a high-severity Windows DWM flaw that allows low-level users to seize SYSTEM privileges via a rendering brush error. PoC availabe.

Researcher Details Zero-Day Linux/Android Kernel Flaw (CVE-2025-38352) Linux Timer TOCTOU, CVE-2025-38352

Researcher Details Zero-Day Linux/Android Kernel Flaw (CVE-2025-38352)

Do Son October 3, 2025

A High-severity TOCTOU race condition (CVE-2025-38352) in the Linux/Android POSIX CPU Timer subsystem can lead to kernel crashes and privilege escalation.

PoC Released: Linux Kernel Flaw Allows User to Gain Root Privileges CrackArmor AppArmor Vulnerabilities Linux Kernel UAF, Privilege Escalation PoC CVE-2024-27397 PoC

CrackArmor AppArmor Vulnerabilities Linux Kernel UAF, Privilege Escalation PoC CVE-2024-27397 PoC

PoC Released: Linux Kernel Flaw Allows User to Gain Root Privileges

Do Son October 2, 2025

A high-severity flaw in the Linux ethtool netlink interface (CVE-2025-21701) enables a Use-After-Free attack to gain root privileges. A PoC has been publicly released.