数字泔水\(⁠◔⁠‿⁠◔⁠)✨ Thinking...https://tg.okhk.nethttps://tg.okhk.net/posts/10755https://tg.okhk.net/posts/10755Fri, 07 Aug 2026 07:56:17 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4896" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b>🔴</b></i> Linux 内核 Open vSwitch 模块本地提权漏洞 OVSwrap。<br /><br />- 在用户命名空间有 CAP_NET_ADMIN 权限的进程 (<code>unshare -Urn</code>) 即可以利用此漏洞提权。<br />- 大多主流发行版均受到影响。<br />- Mitigation 是禁用 <code><mark class="highlight">openvswitch</mark></code> 模块或 unprivileged user namespace 。<br />- Kernel 上游和 Debian 各支持版本已经发布修复。<br /><br /><a href="https://heyitsas.im/posts/ovswrap/" target="_blank" rel="noopener" title="heyitsas.im/~">heyitsas.im/~</a><br /><br />CVE: CVE-2026-64531<br />CVSS: 7.8 (<a href="http://kernel.org/" target="_blank" rel="noopener" title="kernel.org">kernel.org</a>)<br />Fixed-In: 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5<br /><br />[感谢一位匿名订户提供信息。]<br /><br /><i>EDIT 8/7</i>: 修正对利用此漏洞条件的描述。<br /><br /><a href="/search/result?q=%23OpenvSwitch" title="#OpenvSwitch">#OpenvSwitch</a> <a href="/search/result?q=%23Kernel" title="#Kernel">#Kernel</a>