ZDI-CAN-26621
LOW 2.8
Overdue
Apr 02, 2025
Linux
This vulnerability affects Linux, the widely-used open-source operating system kernel. The flaw has a low severity rating (CVSS 2.8) and requires local access with user-level privileges and specific conditions to exploit, with the only impact being a potential denial of service affecting the broader system. Security teams should monitor for patches after the July 31, 2025 vendor deadline and prioritize this update for systems where unprivileged local users are a concern, though the low risk allows it to be scheduled with routine maintenance updates.
Advisory Details
Researcher
Discovered by:
ReDress
Reported
April 02, 2025
Deadline
July 31, 2025
259d overdue
CVSS Vector
AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L