CERT24OVSwrap: 13-year-old Linux kernel flaw lets local users become rootLoading data…
CERT24Threat Observatory
Period

OVSwrap: 13-year-old Linux kernel flaw lets local users become root

Security researcher Asim Manizada disclosed CVE-2026-64531, a local privilege-escalation vulnerability in the Linux kernel’s Open vSwitch datapath, with a CVSS score of 7.8. The vulnerability can allow an ordinary user to gain root privileges on many default-configured distributions using Open vSwitch. The upstream fix reached stable kernel trees on July 24, and a proof-of-concept exploit is public.

← Back to intelligence

OVSwrap: 13-year-old Linux kernel flaw lets local users become root

Security researcher Asim Manizada disclosed CVE-2026-64531, a local privilege-escalation vulnerability in the Linux kernel’s Open vSwitch datapath, with a CVSS score of 7.8. The vulnerability can allow an ordinary user to gain root privileges on many default-configured distributions using Open vSwitch. The upstream fix reached stable kernel trees on July 24, and a proof-of-concept exploit is public.