Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

STAR Labs has developed and publicly released a Linux kernel exploit for CVE-2026-53264, a use-after-free race condition in the network traffic-control subsystem, enabling local privilege escalation to root on CentOS Stream 9. The exploit leverages AI-assisted development for vulnerability discovery and optimization, requiring specific kernel configurations including unprivileged user namespaces and certain traffic-control modules. Although the exploit is not yet known to be exploited in the wild, public availability increases risk for unpatched systems. The vulnerability has been patched in multiple kernel versions, but distribution-level updates remain uneven across vendors.

AI-extracted · verify before operational use