#Arch Linux

Infinity Core: six Linux kernel core bugs with public root exploits and container escapes (CVE-2026-98260 and others)

Researcher Hyunwoo Kim (@v4bel) published "Infinity Core" on oss-security on Oct 16 2026 after the linux-distros embargo ended: six bugs in the Linux kernel's Timer, Signal, MM, Futex, Scheduler and SLAB code. Five come with public proof-of-concept exploits that take an unprivileged local user to a root shell, and the researcher says they also allow container escape; none needs an unprivileged user namespace. Four of the root exploits were tested on Ubuntu 26.04 (kernel 7.0.0-30-generic) and the scheduler one on Arch Linux (7.2.4-arch1-2). The timer bug, CVE-2026-98260 (a POSIX CPU timer use-after-free when exec() fails in a non-leader thread), also gives full root from an Android untrusted_app on a Samsung Galaxy S26 Ultra; that Android exploit is held back until Samsung ships a fix. The other CVEs are CVE-2026-98256 (sigqueue use-after-free in exec()), CVE-2026-89754 (out-of-bounds write in the page table walk used by mincore()), CVE-2026-80775 (futex private hash use-after-free), CVE-2026-98385 (scheduler cache accounting use-after-free, only with CONFIG_SCHED_CACHE active and multiple LLCs) and CVE-2026-97941 (SLUB list corruption, public trigger only panics the kernel). All are fixed upstream and in stable kernels. Every exploit needs code already running on the machine. Install your distro's kernel update and reboot.

Linux kernel (timer, signal, mm, futex, scheduler, SLUB)·Since Oct 16, 2026·updated Oct 30, 2026, 08:24 UTC