AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched

A years-old use-after-free race condition in the Linux net/sched subsystem (CVE-2026-53264) was disclosed after AI-assisted research identified and improved a reliable trigger; successful exploitation can yield local root privileges but requires unprivileged user namespaces and specific kernel options. The researcher also reported two perf events flaws (one tracked as CVE-2026-64300), prepared an exploit entry for a contest (not publicly demonstrated), and upstream patches have been issued; administrators should apply vendor updates.