CVE

CVE-2026-53264

View on NVD ↗

net/sched: act_api: use RCU with deferred freeing for action lifecycle

MITRE ATT&CK TTPs 3

T1068
Exploitation for Privilege Escalation
Privilege Escalation
 T1134
Access Token Manipulation
Defense Evasion
 T1204.002
Malicious File
Execution

Source Articles

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
STAR Labs has developed and publicly released a Linux kernel exploit for CVE-2026-53264, a use-after-free race condition in the network traffic-control subsystem, enabling local privilege escalation to root on CentOS Stream 9. The exploit leverages AI-assisted development for vulnerability discovery and optimization, requiring specific kernel configurations including unprivileged user namespaces and certain traffic-control modules. Although the exploit is not yet known to be exploited in the wild, public availability increases risk for unpatched systems. The vulnerability has been patched in multiple kernel versions, but distribution-level updates remain uneven across vendors.
hacker-news Jul 28, 2026