KernelCare

The Short Version Jump to the Long Version ↓ What it is: GhostLock (CVE-2026-43499) is a use-after-free in the Linux kernel’s futex priority-inheritance code, the locking feature behind glibc’s PTHREAD_PRIO_INHERIT...

The Short Version Jump to the Long Version ↓ What it is: Januscape (CVE-2026-53359) is a use-after-free in the Linux kernel’s KVM/x86 shadow MMU. A malicious guest can drive KVM...

The Short Version Jump to the Long Version ↓ What: Bad Epoll, tracked as CVE-2026-46242, is a race-condition use-after-free in the Linux kernel’s epoll subsystem. In the ep_remove() cleanup path,...

The Short Version What: A Linux local privilege escalation and container escape nicknamed ipv6-frag-escape. An arithmetic mistake in the IPv6 packet output path (__ip6_append_data()) under-sizes a socket buffer’s linear head...

If you manage live patching at scale, you know what good tooling looks like. A clear picture of patch status across the fleet. The ability to act the moment a...

Key Takeaways RHEL’s defenses are a strong starting point for Red Hat security, but none of that holds without active patching, audit cycles, and lifecycle discipline. Running RHEL 7 or...

Get KernelCare Don’t want a fourth emergency reboot window this month? KernelCare applies rebootless Linux kernel patches without downtime or disruptions. *Update (2026-05-18, 13:00 UTC): KernelCare released rebootless patches for...

A week after Copy Fail (CVE-2026-31431), researcher Hyunwoo Kim disclosed a second Linux kernel local privilege escalation in the same broad area, IPsec ESP and rxrpc, and named it Dirty...

Key Takeaways Automated patch management ensures consistent, timely security updates across systems — without the risks of manual intervention. Key benefits include enhanced security, compliance readiness, and scalability across diverse...

Key Takeaways: KernelCare applies kernel and library patches to running systems, eliminating the need for reboots while keeping services fully available. By closing the gap between vulnerability disclosure and remediation,...

Key Takeaways KernelCare applies security fixes to a running kernel without reboots or service interruptions.  Onboarding KernelCare live patching involves a simple installation process with a single command. KernelCare enables...