Linux

This vulnerability affects Linux, the widely-used open-source operating system kernel used across servers, desktops, and embedded systems worldwide. The medium-severity flaw requires local access and high-level privileges to exploit, but once triggered it can expose sensitive information (confidentiality impact) without requiring user interaction or enabling code execution. Security teams should monitor for patches after the April 2026 vendor deadline and prioritize systems where privileged users may be untrusted, though the local-only attack vector limits exposure in most cloud and managed environments.