Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Summary
A Linux kernel exploit targeting CentOS Stream 9 has been published by STAR Labs, allowing a local user to gain root privileges. The vulnerability, tracked as CVE-2026-53264 with a CVSS score of 7.8, is a use-after-free race condition in the network traffic-control subsystem. The researcher credited AI with assisting in the discovery and exploitation process.
IFF Assessment
This is bad news for defenders as it demonstrates a new method of privilege escalation in a critical operating system component, potentially impacting many systems.
Severity
The CVSS score of 7.8 indicates a high severity. The exploit allows for privilege escalation (from user to root) and utilizes a race condition, which can be challenging to reliably trigger but grants significant control over the affected system.
Defender Context
Defenders should be aware of this exploit as it highlights a new avenue for privilege escalation in Linux kernels. Prompt patching of the affected subsystem is crucial, and monitoring for unusual network traffic control activity could aid in detecting exploitation attempts.