Linux Kernel Flaws Patched, Including Guest-to-Host Escape With Public PoC

Linux distributors released security updates to fix multiple Linux kernel vulnerabilities that could let attackers bypass security restrictions, trigger denial-of-service conditions, obtain sensitive information, escalate privileges, execute arbitrary code, and gain access to affected systems. The advisory specifically highlighted CVE-2025-10263, a local race condition in Translation Lookaside Buffer invalidation operations rated CVSS 8.4, and CVE-2026-46316, a local guest-to-host escape vulnerability rated CVSS 7.0.

The notice said a proof-of-concept exploit for CVE-2026-46316 has been disclosed and is circulating in the wild, increasing the urgency for remediation. Red Hat and Ubuntu were identified as distributors providing fixes, and organizations were urged to validate and deploy patches promptly and monitor their vendors for any additional kernel-related updates.