Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Asim Manizada
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-sec mailing list archives From: manizada <manizada () pm me> Date: Fri, 18 Sep 2026 06:15:07 +0000 Hi folks, Emailing here now that the embargo agreed upon with linux-distros@ has expired. Flagging four local root vulnerabilities in the Linux kernel, originally reported to security () kernel org and the relevant maintainers in mid-July: DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121), and DiagSpill (CVE-2026-74469).
CVE-2026-60163: MySQL Group Replication unauthenticated remote arbitrary SQL execution
oss-sec mailing list archives From: manizada <manizada () pm me> Date: Tue, 15 Sep 2026 01:39:26 +0000 Hi folks, Sharing (belatedly) the July disclosure of the MySQL CVE-2026-60163 + an update on its reclassification. The vulnerability permits an unauthenticated remote attacker to execute arbitrary SQL on the destination. Following discussion, Oracle revised the attack vector rating from 'Local' to 'Adjacent Network'.
OVSwrap (CVE-2026-64531): Linux kernel/OVS local root vulnerability
oss-sec mailing list archives From: manizada <manizada () pm me> Date: Tue, 28 Jul 2026 09:59:08 +0000 Hi folks, Emailing here now that the embargo agreed upon with linux-distros@ has expired. Flagging a local root vulnerability in the Linux kernel's Open vSwitch datapath (originally reported to security () kernel org and OVS maintainers on Jun 19).
Re: CIFSwitch: Linux kernel/cifs-utils local root via forged cifs.spnego upcall
oss-sec mailing list archives From: manizada <manizada () pm me> Date: Mon, 01 Jun 2026 16:29:07 +0000 This has been assigned CVE-2026-46243, see https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/ On Thursday, May 28th, 2026 at 12:07 AM, manizada <manizada () pm me> wrote: Hi folks, Emailing here now that the embargo agreed upon with linux-distros@ has expired.
CIFSwitch: Linux kernel/cifs-utils local root via forged cifs.spnego upcall
oss-sec mailing list archives From: manizada <manizada () pm me> Date: Thu, 28 May 2026 07:07:11 +0000 Hi folks, Emailing here now that the embargo agreed upon with linux-distros@ has expired. Flagging a local root vulnerability spanning both CIFS in the kernel and cifs-utils in userspace (originally reported to kernel/cifs maintainers on May 16).
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Asim
Contact Asim, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack