One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

2026-06-10

CVE-2026-23111 is an nf_tables use-after-free bug in the Linux kernel that lets an unprivileged local user gain root and escape containers on common desktop and server setups with user namespaces enabled. Exploits now exist for Debian, Ubuntu, and RHEL, so admins should prioritize kernel updates and consider restricting unprivileged user namespaces until patched.