project

LinuxCVETracker

Tracker that tallies and indexes CVEs assigned to the Linux kernel.

Current clusters

DepthFirst's AF_UNIX exploit takes host root out of a default-configured Ubuntu container

The kernel fixed CVE-2026-80521 on August 6. Ubuntu has shipped nothing for 22.04, 24.04 or 26.04, including its AWS, Azure and GCP kernels, and DepthFirst's exploit for 26.04 went public on September 22.

Publishers:thehackernews.com

Reality

Evidence58
Adoption30
Hype gap+20
Incentives70
Confidence60