Dark Web Intelligence (@DailyDarkWeb) on X

What it is

Infinity Core is a set of six Linux kernel bugs that Hyunwoo Kim published on 16 October 2026, when the linux-distros embargo expired. Public exploit code is available. The affected areas are timer, signal, memory, futex, scheduler and SLUB code. The post's headline also mentions container escape, but the body gives no detail on it.

Affected

Each bug is tied to a CVE:

• Local privilege escalation is demonstrated for CVE-2026-98260, CVE-2026-98256, CVE-2026-89754, CVE-2026-80775 and CVE-2026-98385.
• CVE-2026-97941 has only a crash trigger.

CIQ confirms that four of the six affect its Rocky Linux-based kernels. The post does not say which four. Exploitation needs only unprivileged local access, with no special capabilities and no user namespaces. Disabling user namespaces therefore does not help.

What to do

Install a patched kernel and reboot. No sysctl or module workaround exists. Some CIQ builds were still pending when the post was written, so check your distro's advisory for each CVE. The post advises patching first the hosts with shell users, CI runners or untrusted workloads, and following your distro's kernel guidance.

Caveats

The attacker must already have local access. The post reports no in-the-wild exploitation. It is a short social media summary that links to the oss-sec list post (seclists.org/oss-sec/2026/q…) for the technical detail. It gives no per-bug mechanism, no affected version ranges and no CVSS scores.