One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

Researchers published a working exploit for CVE-2026-23111, a Linux kernel nf_tables use-after-free that enables local unprivileged users to gain root and escape containers; upstream and vendor patches shipped Feb 5, 2026, exploit code appeared publicly in April–June, and affected distributions include Debian, Ubuntu, Red Hat and others — update kernels and reboot or restrict unprivileged user namespaces.