A critical use-after-free vulnerability has been discovered in the Linux kernel's network subsystem, affecting all major distributions including Ubuntu, Red Hat Enterprise Linux, Debian, and SUSE. Tracked as CVE-2026-8832 with a CVSS score of 9.1, the vulnerability allows local privilege escalation with low attack complexity.
The vulnerability exists in the kernel's handling of network namespace operations, where a race condition can lead to a use-after-free condition that attackers can exploit to execute arbitrary code with kernel privileges. Proof-of-concept exploit code has been published, though active exploitation in the wild has not yet been confirmed.
All major distribution vendors have released patches. Organizations are urged to prioritize patching for internet-facing systems and critical infrastructure. The vulnerability serves as a reminder of the importance of timely kernel updates, even for systems with limited local user access.