Blog Series
KernelCare
- No categories
CVE-2026-98276 Was Fixed Upstream. Then...
KernelCare Rebootless Patches for CVE-2026-98276 Are Out for EL 8 and 9 TuxCare has confirmed privilege escalation on EL 8, 9 and 10, so this is a local root bug...
Claude Wrote a Remote Root...
KernelCare Rebootless Patch for CVE-2026-98432 Is Out for Debian 13 KernelCare’s rebootless patch for CVE-2026-98432 is out for Debian 13. Work on Debian 12 and Oracle Linux UEK is in...
Leaked Linux Kernel Reports Include...
KernelCare Rebootless Patch for skb_zerocopy Is Out for EL9 and EL10 KernelCare’s rebootless patch for ZDI-CAN-33367 is out for EL9 and EL10 on AlmaLinux, CloudLinux, RHEL, Oracle Linux and Rocky...
Infinity Core Proves the Quiet...
The Short Version Jump to the Long Version ↓ What it is: Infinity Core is the name Hyunwoo Kim (@v4bel) gave to six bugs in core kernel code, covering POSIX...
PwnEscape Hid in the Kernel...
Updated October 27, 2026 The KernelCare rebootless patch is now in the production feed for AlmaLinux, Oracle Linux, RHEL, and Rocky Linux 8, 9, and 10, plus CloudLinux 9 and...
Three Old Linux Kernel Bugs...
The Short Version Jump to the Long Version ↓ What they are: On September 18, 2026, CISA added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog. CVE-2025-39682 sits...
Linux Kernel Rebootless Patching When...
Key Takeaways Linux kernel rebootless patching applies security fixes to a running kernel, so remediation stops waiting on reboots. In this blog post, we examine a five-person team covering roughly...
How VsockDrop Reaches Root With...
The Short Version Jump to the Long Version ↓ A Linux kernel flaw scored at 5.5 now has a public exploit that turns an unprivileged local user into root. That...
Zapscape Explained and How to...
The Short Version Jump to the Long Version ↓ What it is: CVE-2026-64561, named Zapscape by its finder, Hyunwoo Kim (@v4bel), is a use-after-free in the Linux KVM x86 shadow...
New OVSwrap Linux Flaw Gives...
The Short Version Jump to the Long Version ↓ What it is: CVE-2026-64531, also known as OVSwrap, is a Linux kernel local privilege escalation in the Open vSwitch action-validation path....
How KernelCare Patched Januscape Before...
Key Takeaways: OVHcloud patched Januscape by rebooting tens of thousands of hosts over 11 days, with real downtime, hardware failures, and a global crisis cell. KernelCare delivered both required Januscape...