June 9, 2026

Every now and then, a kernel bug comes along that is humbling precisely because it is so small. CVE-2026-23111 is one of those. It is a use-after-free in the Linux kernel’s nf_tables subsystem, and it lets an unprivileged local user climb all the way to root — and break out of a container while doing