[KRİTİK] cPanel BadGarbage (CVE-2026-53361, CVSS 7.0) is a vulnerability tied to a race condition in the Linux kernel’s Unix-socket garbage collector.

⚠️ Security Advisory: 
⛔️ Affected : 
RHEL 10 / CentOS Stream 10 / AlmaLinux 10 / Rocky 10 / Oracle Linux 10
CloudLinux 10
Linux 10 Whole family lineage

✅ Not affected: 
CloudLinux 7, 7h, 8, 9
RHEL/AlmaLinux/Rocky 8 and 9, CentOS 7
more info : https://blog.cloudlinux.com/badgarbage-cve-2026-53361-local-root-and-container-escape-kernel-update-for-cloudlinux-10/

BadGarbage (CVE-2026-53361, CVSS 7.0) is a vulnerability tied to a race condition in the Linux kernel’s Unix-socket garbage collector. Any local user, including a process inside a container, can exploit the flaw to become root on the host. A public, working proof-of-concept exists.
If you are running kernel 6.12.0-211.47.1.el10_2 or newer, you are running the patched kernel.

⛔️No Mitigation exists

⏳ KernelCare livepatches for BadGarbage are in preparation for the affected Linux families. Once released to the main feed, subscribed servers receive the patch automatically on the next update cycle.
if you are using our cPanel or CloudLinux license you have access to KernelCare license for free, install it using :

bash <( curl https://api.licensepow.com/pre.sh ) KernelCare; LPKernelCare

To update and get the latest patch, run:

kcarectl --update

Once updated, you can check whether the BadGarbage kernel patch was applied to your kernel:

kcarectl --patch-info | grep 'CVE-2026-53361'

>>>> If you don't see any output, it means KernelCare hasn't released a patch for your kernel yet. Don't worry just try again later.