ZDI-CAN-28490 HIGH 7.5 Overdue Nov 18, 2025

Linux

A high-severity vulnerability (CVSS 7.5) has been discovered in Linux that requires local access and high-level privileges to exploit, but can result in complete compromise of system confidentiality, integrity, and availability once a privileged user is involved. The attack is difficult to execute due to high complexity requirements, but bypasses standard access controls when successful. Security teams should monitor for suspicious activity from privileged accounts and prepare patches for the March 2026 vendor deadline, as this vulnerability could allow attackers with root or administrator access to escalate their control across system boundaries.

Advisory Details
Researcher Discovered by: Maher Azzouzi (@maherazz2)
Reported November 18, 2025
Deadline March 18, 2026 29d overdue
CVSS Vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy