PoC for CVE-2026-80521 Is Public; Ubuntu Fixes Underway for Some Packages

Researchers at DepthFirst published exploit source code for a Linux kernel flaw. Canonical still lists the vulnerability as unfixed for some Ubuntu packages.

Researchers at DepthFirst published exploit source code for a Linux kernel flaw. Canonical still lists the vulnerability as unfixed for some Ubuntu packages.

CISA has recorded active exploitation of three Linux kernel flaws. U.S. federal civilian agencies have until September 21, 2026, to remediate and conduct forensic triage of affected assets.

CISA added an ebtables SNAT vulnerability in the Linux kernel to its KEV catalog. Organizations should review affected configurations and deploy fixes from vendors.

Security bulletin QSB-118 warns of a flaw when transferring a file from dom0 to a malicious qube. Under certain conditions, it allows an arbitrary command to be executed in dom0.

The California Legislature approved AB 1856, which would exempt software distributed with rights to copy, redistribute, and modify it from age-signal requirements. The bill is not yet law.