MEDIUMVulnerability
Global

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

·Source: The Hacker News

Updated:

Executive Summary

Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained undetected for nine years. The vulnerability, tracked as CVE-2026-46333 (CVSS score: 5.5), is a case of improper privilege management that could permit an unprivileged local user to disclose sensitive files and execute arbitrary commands as root on default installations of several major

Analysis

Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained undetected for nine years. The vulnerability, tracked as CVE-2026-46333 (CVSS score: 5.5), is a case of improper privilege management that could permit an unprivileged local user to disclose sensitive files and execute arbitrary commands as root on default installations of several major

Indicators of Compromise (1)

CVE (1)
CVE-2026-46333
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on May 21, 2026.

Related Threats

CRITICALAi

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-209-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommend

CVE-2021-41617CVE-2023-28531
CISA Advisories
CRITICALApt

Impact of Linux Kernel vulnerabilities on B&amp;R products

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-174-06.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>B&amp;R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to

CVE-2026-31431CVE-2026-43284
CISA Advisories
LOWAi

Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more

This week's release includes five new modules, including a full unauthenticated RCE chain for Paperclip AI and a VS Code extension persistence technique. On the post-exploitation side, the new windows/local/ntlm_relay_2_self module coerces the local machine account to authenticate via OpenEncryptedFileRaw (WebDAV), relays that NTLM authentication to a Domain Controller's LDAP service, then uses th

CVE-2026-41679CVE-2026-41459
Rapid7