Triage of Ubuntu's September 2026 kernel rollups addressing critical io_uring memory corruption, eBPF verifier bounds, and network packet handling vulnerabilities.
io_uring subsystem, an actively targeted use-after-free flaw that allows unprivileged local attackers to elevate privileges to root.
| CVE 식별자 | 서브시스템 / 구성 요소 | 영향 | CVSS | 실제 악용 여부? |
|---|---|---|---|---|
| CVE-2024-0582 | io_uring / Ring Buffer | Use-After-Free / LPE | 7.8 High | YES (In-The-Wild) |
| CVE-2024-41090 | eBPF Verifier | Bounds Check Bypass | 7.1 High | No |
| CVE-2024-41091 | Bluetooth L2CAP | Null Pointer Dereference | 6.5 Medium | No |
| CVE-2024-41092 | Ext4 Filesystem | Out-of-Bounds Read | 5.5 Medium | No |
Inspect the exact C diff from fs/io_uring.c showing how registering an existing ring buffer caused a premature reference drop and slab-use-after-free.