thinQtankLABS

Kernel Patch Triage & Remediation: CVE-2026-43284 & CVE-2026-43500

Triage two Linux kernel local-privilege-escalation findings (CVE-2026-43284 and CVE-2026-43500) in one running kernel on a shared host: confirm the kernel, score both with CVSS, judge exposure, then apply the single update that fixes both and verify.

Beginner 20 guided steps 5 tasks About 55 minutes Runs in your browser

Skills you will practice

  • Kernel vulnerability management
  • Handling multiple CVEs in one kernel
  • CVSS v3.1 scoring (scope changed vs unchanged)
  • Branch-aware patching
  • Patch verification

Certifications this lab maps to

This lab builds hands-on skills that appear on these certification exams. thinQtank Learning runs instructor-led training camps for each — click one to see upcoming classes.

CompTIA Security+ SY0-701 Vulnerability and patch management Training at thinQtank Learning CompTIA Linux+ XK0-005 Kernel updates and system maintenance Training at thinQtank Learning CompTIA CySA+ CS0-003 Vulnerability identification and prioritization Training at thinQtank Learning
Part of these certification lab packages: Security+ SY0-701 CySA+ CS0-003 Linux+ XK0-005 Certified in Cybersecurity (CC) GSEC GSEC

The scenario

You are the systems analyst on call. The scanner flagged TWO High-severity kernel bugs — CVE-2026-43284 and CVE-2026-43500 — in the same running kernel on a shared build server. Both are local privilege escalations. Start by understanding them.

What you will do

  1. Triage the alert4 steps

    Open the ticket · Read the scan report · How many findings? · Read the ticket

  2. Confirm the running kernel4 steps

    Check the running kernel · Confirm the branch · Read the CVE-2026-43284 advisory · Read the CVE-2026-43500 advisory

  3. Assess the severity of both5 steps

    Score CVE-2026-43284 · CVE-2026-43284 score? · Score CVE-2026-43500 · CVE-2026-43500 score? · …

  4. Confirm exposure and scan2 steps

    Count local shells · Baseline scan

  5. Remediate both and verify5 steps

    Which version fixes both? · Install the patched kernel · Confirm the running kernel · Verify both findings clear · …

How this lab works

A real Linux-style console. Commands run against real files, so hashes, hex dumps and comparisons give real results.

A file browser where you can place evidence into the lab, either the file provided or one of your own.

Reset a single step, a whole task or the entire lab. The environment is rebuilt so you can try again cleanly.

Progress saves after every step. Close the tab and come back later; your files and answers are waiting.