Security researcher Marcus Hutchins discovered a zero‑day integer underflow in Comodo Internet Security’s Inspect.sys firewall driver that can be triggered remotely via a crafted IPv6 packet, causing a Windows kernel blue‑screen; the analysis details the vulnerability, PoC, limitations for RCE, and mitigation recommendations.
A newly disclosed Linux kernel vulnerability (CVE‑2026‑31431, dubbed “Copy Fail”) allows an unprivileged user to execute a 732‑byte Python script that writes four controllable bytes into the page cache, directly modifying /usr/bin/su to obtain root, affecting all kernels from 2017 to the patch release and posing severe risks such as container escape and cloud‑tenant isolation breaches.
The newly disclosed Linux kernel vulnerability CVE‑2022‑0847, dubbed “Dirty Pipe,” affects kernels 5.8 and later (including many Android 12 devices), allowing unprivileged users to overwrite read‑only files and gain root privileges, with existing PoC/EXP and patches already released.
