Research
OVSwrap: another Linux local root vulnerability
Publication date not yet evaluated · Added heyitsas.im
Page published
Coverage timeline
Single-source research — one report is available.
Why it matters
OVSwrap demonstrates LLM-driven agentic systems autonomously discovering novel, deterministically exploitable kernel memory-corruption bugs, signaling that AI agents are becoming practical offensive vulnerability-research tools defenders must anticipate.
OVSwrap (CVE-2026-64531, CVSS 7.8) is a Linux kernel Open vSwitch datapath memory-corruption bug that lets an unprivileged local user gain root on broadly default-configured distributions, with a public exploit shipping pre-built offsets for ~800 kernel builds. Researcher Asim Manizada disclosed it and, notably, says it was found by equipping LLM 'hunter agents' with graph-reasoning and persistent ASCII-diagram memory-geometry tools to reason through the 16-bit Netlink length wraparound that redirects parsing into attacker-controlled conntrack data.