Microsoft Windows Security
The latest Microsoft Windows Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-64078: The 7.8-Rated Linux Kernel Bug That WSL 2 Users Must Patch Now
A 7.8-rated Linux kernel vulnerability (CVE-2026-64078) in Netfilter’s x_tables lifecycle can be exploited locally on systems running kernels 5.15+, including the Linux kernel inside WSL 2. The bug occurs during firewall table teardown and can lead to a denial-of-service or possible privilege escalation. Windows users with WSL 2 must update their WSL kernel immediately; other Windows users are not affected.
USB-C Firmware Bug Can Crash Linux PCs: Patches Released, Windows Dual-Booters Take Note
CVE-2026-63958 is a Linux kernel vulnerability that lets a buggy or malicious USB-C firmware controller trigger out-of-bounds memory access, potentially crashing systems. Fixed kernels are now available across all major stable branches. Windows systems are not directly affected, but the defect underscores risks for dual-boot users and highlights the need for firmware vigilance.
High-Severity Linux Wi-Fi Mesh Bug (CVE-2026-64117) and What It Means for Windows Users
CVE-2026-64117 is a high-severity Linux kernel bug in the mac80211 Wi-Fi mesh forwarding path, scored 8.8. It does not affect Windows directly, but dual-boot users, home-lab enthusiasts running Linux mesh nodes, and IT pros with Linux-based wireless infrastructure need to patch. Windows-only users are safe; WSL 2 users are unlikely to be exposed due to virtualized networking.
USB-C Chargers Could Leak Your Linux PC’s Memory—The Kernel Fix Is Here
A newly disclosed Linux kernel vulnerability (CVE-2026-63959) in the Maxim USB-C port controller driver could allow a malicious charger or dock to read uninitialized stack memory. The fix, backported to stable kernel releases 6.6.143, 6.12.93, 6.18.35, 7.0.12, and 7.1, adds validation to reject inconsistent USB Power Delivery messages. Linux users with affected hardware should update promptly; Windows systems are not directly exploitable but shared peripherals require caution in mixed environments.
Linux USB-C Vulnerability Allows Kernel Memory Overwrite by Rogue Accessories
A recently disclosed Linux kernel vulnerability (CVE-2026-63962) allows a malicious USB-C accessory to overwrite kernel memory by exploiting a missing bounds check in the Type-C Port Manager. Patched kernels are available for all major stable branches, and users are urged to update immediately. While Windows systems are not directly affected, mixed-OS environments and IT administrators should ensure all Linux endpoints are remediated.
Linux Kernel Bug Fixed After 20 Years: WSL 2 and VM Users Must Update to Avoid Memory Attacks
A use-after-free vulnerability in the Linux kernel’s ALSA OSS compatibility layer, present since 2006, was disclosed in July 2026. The flaw can be triggered under memory pressure while writing audio configurations, potentially leading to system crashes or code execution. Windows users running WSL 2, Linux VMs, or dual-boot systems must update their Linux kernels immediately to mitigate the risk.
Linux Kernel Crash Bug Hits WSL 2 and Docker — Here’s How to Patch It
A race condition in the Linux Netfilter firewall (CVE-2026-64079) can crash kernels running in WSL 2, Docker Desktop, and Linux VMs. Windows hosts are unaffected, but any Linux instance must be patched to prevent denial-of-service. The fix moves hook allocation under a mutex and adds RCU synchronization; users should update WSL, Docker, and guest VMs immediately.
Linux Kernel BPF Flaw CVE-2026-64036 Exposes Local Attack Paths – Patch Now
A high-severity Linux kernel flaw (CVE-2026-64036, CVSS 7.8) in the cgroup rstat subsystem lets local attackers with BPF capabilities trigger out-of-bounds memory access, risking crashes or compromise. The bug affects kernels since 6.1, including WSL 2, but is patched in fixed versions. Users and admins should update immediately and audit BPF-related capabilities.
New Linux LM90 Driver Flaw: What Windows and WSL Administrators Should Do Right Now
A use-after-free race in the Linux kernel's lm90 temperature sensor driver (CVE-2026-64038) can lead to crashes or memory corruption during device removal or initialization failure. While not a native Windows vulnerability, it affects WSL, Linux servers, and embedded devices commonly managed from Windows environments. The fix, available in recent stable kernels, reorders worker cancellation and adds a shutdown flag.
CVE-2026-63882: A Missing Check in AMD’s Linux Kernel Driver Can Crash Your System
CVE-2026-63882 is a Linux kernel vulnerability in AMD’s KFD compute driver that can cause a NULL pointer dereference and system crash when an SVM ioctl is called before the required VM acquisition step. The fix has been backported to multiple stable kernels (6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12, and 7.1). Most affected are shared GPU servers and containerized workloads; home users with standard AMD graphics are unlikely to be impacted unless they actively use ROCm or HIP.
BusyBox 1.38.0 Heap Overflow Puts Routers, Containers, and IoT at Risk—Here’s How to Respond
CVE-2026-38755 is a heap overflow vulnerability in BusyBox 1.38.0's ash shell that can cause denial of service on routers, embedded devices, and containers. While remote code execution has not been confirmed, the widespread use of BusyBox makes asset discovery and vendor patch verification urgent. The article provides a practical multi-step response plan for IT and security teams.
Fix Your WSL 2 Kernel Now: Linux Ebtables Flaw CVE-2026-64077 Scores High Severity
CVE-2026-64077 is a high-severity Linux kernel vulnerability in ebtables that affects kernels from 5.15 onward. Windows users with WSL 2, Docker Desktop, or Linux VMs must update their Linux kernels immediately. The fix is available upstream in Linux 6.18.34, 7.0.11, and 7.1. Follow our step-by-step guide to patch WSL, Docker, and VMs without delay.
Patch Now: AMDGPU Kernel Race Condition (CVE-2026-63879) Opens Linux Systems to Local Attacks
A high-severity vulnerability (CVE-2026-63879) in the Linux kernel's AMDGPU driver allows local attackers to exploit a race condition in GPU memory management, potentially compromising system memory. The flaw, rated 7.8 CVSS, affects kernel versions 6.2 through 7.0.11 and has been fixed in 7.0.12 and 7.1. All AMD Radeon and Instinct users on Linux should update and reboot immediately, with extra urgency for shared GPU servers and compute clusters.