Microsoft FORGE Lab MDASH finds Linux CVE-2026-64563 exploited potential local privilege escalation

Researchers at Microsoft's FORGE Lab used AI code-scanning and reproduction tools under codename MDASH to analyze Linux kernel subsystems, producing 59 public upstream reports and 33 assigned CVEs over a three-month period. The effort revealed that while AI agents can rapidly find thousands of potential issues, expert human investigation remains necessary to validate vulnerabilities, develop working exploits, and merge fixes upstream. Among their findings was CVE-2026-64563, a state-reset flaw in the rhashtable library that enabled stable local privilege escalation. Open article →