OVSwrap (CVE‑2026‑64531) lets any local user become root via Open vSwitch
A memory‑corruption bug in the Linux kernel’s Open vSwitch datapath lets an unprivileged user with CAP_NET_ADMIN (or a user namespace) corrupt kernel memory and spawn a root shell. The flaw, disclosed as CVE‑2026‑64531, affects default installations of major distros such as AlmaLinux, Debian, Fedora and others, and patches landed in kernel 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40 and 7.1.5.