Linux Kernel Out-of-Bounds Write Flaw Enables Local Privilege Escalation to Root

A newly disclosed Linux kernel out-of-bounds write vulnerability, tracked as CVE-2026-72018, can be leveraged by a local attacker holding CAP_NET_ADMIN privileges to escalate to root. The flaw affects the DIBS loopback implementation used by the Shared Memory Communications Direct (SMC-D) subsystem and has received a CVSS 3.1 score of 7.8, rated High. The issue stems from a missing bounds check in the dibs_loopback driver’s move_data() routine. Linux Kernel Out-of-Bounds…