Research · curated 5 Aug 2026

OVSwrap: another Linux local root vulnerability

First reported today heyitsas.im

Coverage timeline

Single-source research — first reported, latest, and curated coincide.

Why it matters

OVSwrap demonstrates LLM-driven agentic systems autonomously discovering novel, deterministically exploitable kernel memory-corruption bugs, signaling that AI agents are becoming practical offensive vulnerability-research tools defenders must anticipate.

OVSwrap (CVE-2026-64531, CVSS 7.8) is a Linux kernel Open vSwitch datapath memory-corruption bug that lets an unprivileged local user gain root on broadly default-configured distributions, with a public exploit shipping pre-built offsets for ~800 kernel builds. Researcher Asim Manizada disclosed it and, notably, says it was found by equipping LLM 'hunter agents' with graph-reasoning and persistent ASCII-diagram memory-geometry tools to reason through the 16-bit Netlink length wraparound that redirects parsing into attacker-controlled conntrack data.