Linux kernel · Exploitation reported

Linux gets 38 fixes after Microsoft finds 59 flaws

Nov 12, 2026 · 1 min read

Microsoft found 59 Linux kernel flaws, including CVE-2026-74544 in the cls_u32 filter. The team built laboratory exploits for eight flaws that let an ordinary user gain root access. Thirty-eight fixes have landed so far.

By HIFY Radar newsroom Updated 11/12/2026 09:46 PM Get this every day →← Back to the feed 2 sources

HighVulnerabilityExploitation reportedPartial fix

In 30 seconds

Alleged

The latest account says 38 fixes have landed after Microsoft researchers reported 59 Linux kernel bugs. It also says they built laboratory exploits for eight flaws that could elevate an ordinary local user to root, the system’s highest privilege level.

What happened

Alleged

According to IntCyberDigest, one Microsoft researcher and an intern used an AI-assisted system called MDASH to identify candidates, validate a smaller subset and ultimately report 59 bugs. Microsoft published a Security Blog page specifically about lessons from those 59 reports.

Why it matters

Inferred

The eight reported lab exploits matter because moving from an ordinary account to root can give an attacker complete control of an affected machine. The evidence establishes laboratory demonstrations, not exploitation against real systems in the wild.

What to do

Inferred

Linux administrators should prioritize available kernel security updates and compare their deployed kernels with vendor advisories as fixes arrive. The supplied evidence says 38 fixes have landed, but it does not provide the patch list or identify which distributions have shipped them.

Confirmed and still uncertain

Alleged

The batch attributes 59 reports, 33 CVEs, 24 High ratings and eight working privilege-escalation exploits to the research. It does not establish affected kernel versions, exploitation in the wild, public exploit availability or the status of every remaining report.

What people are saying

Alleged

IntCyberDigest says Microsoft described bug discovery and bug fixing as “drastically out of balance.” The Hacker News separately summarized the finding as 59 kernel bugs, including eight with working root exploits, but neither supplied excerpt adds affected-version details.

Evolution

Alleged

The reported chain starts with MDASH flagging 26,502 possible flaws in roughly two weeks. The account says 621 candidates came with proof, 59 were reported, 33 received CVEs and 38 fixes had landed by the time of publication.

Reach

Observed

5 independent groups, 2 updates, and 9 engagements.

Technical detail

Alleged

One account identifies CVE-2026-74544 in cls_u32, a kernel network-traffic filter, as a bug that had gone unnoticed for at least 21 years. It also puts the average age of the reported bugs at 8.1 years, though the supplied batch does not include the underlying calculations.

Sources and evidence

Observed

The batch includes a Microsoft Security Blog URL devoted to the 59 reports, but its supplied body is empty. Most numerical and technical details therefore come from social posts by IntCyberDigest and The Hacker News and remain attributed claims rather than independently demonstrated findings within this evidence set.