Four Linux Kernel Flaws Enable Local Root Privilege Escalation
Attack Tradecraft · 59 sources · Updated 2mo ago · First seen Sep 18, 2026
Researchers disclosed four Linux local privilege-escalation vulnerabilities dubbed DirtyAH6 (CVE-2026-80844), PPPoEject (CVE-2026-81000), TUNderflow (CVE-2026-68121), and DiagSpill (CVE-2026-74469). The flaws, identified through agentic vulnerability hunting, could allow a local attacker to obtain root-level privileges on affected Linux systems.
Oracle Linux issued ELSA-2026-500330 updates for Oracle Linux 7 and 8 systems running Unbreakable Enterprise Kernel packages, addressing all four CVEs. CVE-2026-68121 carries a CVSS v2 score of 10.0, while CVE-2026-74469 is rated high severity with low-privilege requirements; the vendor advisory reported no known exploits at publication. Organizations using affected UEK deployments should prioritize applying the available kernel updates and reboot systems into the patched kernel.
