(⁠◔⁠‿⁠◔⁠) Are you OK？✨ Thinking...https://tg.okhk.nethttps://tg.okhk.net/posts/10754https://tg.okhk.net/posts/10754Fri, 07 Aug 2026 07:56:10 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4895" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b><span class="post-title-source">🔴</span></b></i><span class="post-title-source"> Linux 内核 sctp 模块本地提权漏洞 </span><mark class="highlight"><span class="post-title-source">SCTPhantom</span></mark><span class="post-title-source">。</span><br /><br />- 腾讯朱雀实验室利用 AI 辅助发现了一个于 2008 年引入的 sctp 模块的漏洞。<br />- Kernel 上游和 Debian Trixie/Sid 已经发布修复版本。<br /><br />CVE: CVE-2026-64564<br />CVSS: 8.5 （作者自评）<br />Fixed-In: 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2-rc5<br /><br /><a href="https://matrix.tencent.com/zh/2026/08/06/sctphantom-CVE-2026-64564" target="_blank" rel="noopener" title="matrix.tencent.com/~">matrix.tencent.com/~</a><br /><br />[感谢一位匿名订户提供信息。]<br /><br /><a href="/search/result?q=%23SCTPhantom" title="#SCTPhantom">#SCTPhantom</a> <a href="/search/result?q=%23Kernel" title="#Kernel">#Kernel</a><a class="tgme_widget_message_link_preview" href="https://matrix.tencent.com/zh/2026/08/06/sctphantom-CVE-2026-64564" target="_blank" rel="noopener" title="SCTPhantom 是 Linux 内核 SCTP 动态地址重配置功能中的一个释放后使用漏洞。"> <div class="link_preview_site_name accent_color">腾讯朱雀实验室</div> <img class="link_preview_image" alt="SCTPhantom: 潜伏18年的Linux内核提权与容器逃逸漏洞 · 腾讯朱雀实验室" src="/static/https://cdn4.telesco.pe/file/DjyW_1Wexx1bxMDW61-TDMmdBJqzmv3PKhfaGjByKLWyVHacOZ8oqyjBT4VgmFJMtqw-qtyfc7PjP1Fq0VIgh2ZQi5eaPX9TC8fvwRvbXy6TyjmFVCJ-xi6LNTnTTvib6Fzn9x133P-RiXQzGXmk3UTiZVKlezFStOVlS1lGdb0kkuVl2oDjyZwJ7uckwwoZerToAy2oOdcIO44q4KG7SjJHNLiU_bDc90ipNWLVy6XCl98p9Yi3Ewp82Nh-okHRd3bO1yOuis4PREeWOf6O-vrbnBuEcLzqHCGy_nwt-TB4NaoDxQ2zPMqa-BB8Wc3BZu3HP81bMZIBPbCGz7lEbg.jpg" width="1200" height="630" loading="eager" /> <div class="link_preview_title"><mark class="highlight">SCTPhantom</mark>: 潜伏18年的Linux内核提权与容器逃逸漏洞 · 腾讯朱雀实验室</div> <div class="link_preview_description"><mark class="highlight">SCTPhantom</mark> 是 Linux 内核 SCTP 动态地址重配置功能中的一个释放后使用漏洞。</div> </a>