Lessons from 59 Linux Kernel Bug Reports
In this article From scans to reports Selected findings Closing thoughts At Microsoft’s FORGE Lab, we used codename MDASH to scan a subset of Linux kernel subsystems from late May to mid-June 2026. One full-time researcher and one intern led this three-month effort, which has so far produced 59 public upstream reports and 33 assigned CVEs. We confirmed working root privilege-escalation exploits for eight of those CVEs, and fixes for 38 of our reports have been merged into mainline. Finding the…
EPSS < 0.01 CVE-2026-64563 CVE-2026-74544 Linux US