What happened
Critical security vulnerabilities in the Linux kernel were shared on a public email list before the fixing patches were distributed. This means the flaws became publicly known before patches reached vulnerable systems.
Why it matters
Two of the vulnerabilities carry remote code execution (RCE) risk. Such flaws let an attacker reach a target system from outside and run their own commands. A kernel-level flaw can affect a wide range of systems, from servers to embedded devices.
What the leak means
Normally, vulnerabilities are reported to developers first, a patch is prepared, and only then is the issue disclosed publicly. When this process is skipped, system administrators are left with no time to prepare before applying the fix.
What to do
Following the security advisories of Linux distributions and applying kernel updates quickly once released is critical. Since the details are now public, exploitation attempts can be expected to start soon.
