Tails has released an emergency update for a critical Linux kernel flaw that could allow a malicious website to take control of a user’s system and expose their identity.
The privacy-focused operating system urges users to upgrade to Tails 7.10.1 immediately. Earlier versions remain vulnerable to CVE-2026-64560, a flaw that could give Tor Browser administrator-level access to the system.
That access could allow a malicious website to compromise Tails and deanonymize the user.
The Tor Project said the attack is unlikely to affect most users. However, it warned that a capable government-backed group or commercial hacking firm could potentially exploit the vulnerability against high-value targets.
The project said it has not seen evidence of the flaw being used in real-world attacks.
Critical Tails Linux Vulnerability Affects Tor Browser
Tails, short for The Amnesic Incognito Live System, is a portable Linux distribution designed to protect user privacy and leave no traces on a computer after shutdown.
Activists, journalists, researchers, and people seeking to avoid censorship often run Tails from a USB stick rather than installing it on a computer’s internal storage.
The operating system includes Tor Browser for private web access and can preserve selected files, emails, documents, and additional software in encrypted Persistent Storage on the USB drive.
The newly patched Tails Linux vulnerability affects the Linux kernel’s POSIX CPU timer subsystem. It can trigger a rare race condition under specific circumstances.
The underlying issue has reportedly existed in the Linux kernel since version 5.7, released in May 2020.
According to the Tor Project, a malicious website could exploit the flaw through Tor Browser and obtain administrator privileges. An attacker could then take full control of the Tails system and undermine the anonymity protections users rely on.
Other Privilege Escalation Bugs Also Fixed
The Tails 7.10.1 update also addresses other security issues that could let applications gain administrator privileges.
The project warned that an attacker could trick a user into opening a malicious file in an application that uses the Expat library. Affected applications may include LibreOffice, Audacity, and Git.
If successful, the attacker could use one of the flaws to take control of Tails and deanonymize the user.
Tails stressed that these attack scenarios remain unlikely. They would most likely be used in highly targeted operations against people of particular interest to nation-state attackers or sophisticated commercial surveillance groups.
Still, the severity of the potential impact makes the update important for every user.
Users Should Upgrade to Tails 7.10.1
Tails users should install version 7.10.1 as soon as possible.
The operating system supports both automatic and manual upgrades. These update methods preserve Persistent Storage on the USB drive.
Users should avoid reinstalling Tails unless necessary, as reinstalling the operating system can erase data stored on the USB device.
People who use Tails for sensitive work should also remain cautious with unexpected websites, downloads, and files. Security updates reduce risk, but safe browsing habits and careful handling of documents remain essential.
0 responses to “Tails Linux Fixes Critical Flaw That Could Deanonymize Users”