ZDI-CAN-26601
HIGH 7.8
Overdue
Mar 11, 2025
Linux
Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, but once compromised, grants an attacker the ability to escalate privileges and impact confidentiality, integrity, and availability across the system. Security teams should monitor for privilege escalation attempts and apply patches when Linux vendors release fixes by the July 9, 2025 deadline.
Advisory Details
Researcher
Discovered by:
Pumpkin (@u1f383) from DEVCORE Research Team
Reported
March 11, 2025
Deadline
July 09, 2025
281d overdue
CVSS Vector
AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H