CLN Login
BTR (CVE-2026-64507, CVE-2026-64508) Spectre v2 kernel memory leak: status for CloudLinux
BTR (CVE-2026-64507, CVE-2026-64508) is a Spectre v2 variant that lets a local unprivileged user read kernel memory. It...
Read More
bridge-stp-uaf (CVE-2026-72389) local root vulnerability: kernel update and mitigation for CloudLinux
📋 TL;DR — last updated October 7, 2026, 11:00 UTC bridge-stp-uaf (CVE-2026-72389, CVSS 7.0, Moderate per Red Hat)...
Read More
SCTPhantom (CVE-2026-64564) Local Root Exploit: Status and Fixes for CloudLinux
SCTPhantom (CVE-2026-64564) is a vulnerability in the Linux kernel's SCTP code that lets a local unprivileged user become...
Read More
VsockDrop (CVE-2026-53365): CloudLinux is not affected on stock configuration
VsockDrop (CVE-2026-53365) lets an unprivileged local user become root. We checked every CloudLinux version, and none is exposed...
Read More
RtabRace (CVE-2026-68138): unprivileged local users can crash the host — mitigation and kernel update for CloudLinux
RtabRace (CVE-2026-68138) is a Linux kernel race in the traffic-control subsystem that lets an unprivileged local user corrupt...
Read More
BadGarbage (CVE-2026-53361) Local Root and Container Escape: Kernel Update for CloudLinux 10
BadGarbage (CVE-2026-53361) is a Linux kernel race condition that lets any local user, including a process inside a...
Read More
OVSwrap (CVE-2026-64531) local root exploit: mitigation for CloudLinux 9, 10, and CloudLinux for Ubuntu
OVSwrap (CVE-2026-64531): a Linux kernel flaw giving local root on CloudLinux 9, 10 and CloudLinux for Ubuntu. No...
Read More
RefluXFS (CVE-2026-64600) Local Root Exploit: Release Status Tracker for CloudLinux
RefluXFS (CVE-2026-64600) is a Linux kernel Local Privilege Escalation in the XFS filesystem, present in every kernel from...
Read More
GhostLock (CVE-2026-43499) Local Root Exploit: Kernel Update for CloudLinux
GhostLock (CVE-2026-43499) is a use-after-free bug in the Linux kernel's futex priority-inheritance code that lets any unprivileged local...
Read More
Bad epoll (CVE-2026-46242) Local Root Exploit: Kernel Update for CloudLinux
Bad epoll (CVE-2026-46242) is a use-after-free bug in the Linux kernel's epoll subsystem that lets an unprivileged local...
Read More