ZDI-CAN-28594 MEDIUM 6.0 Overdue Dec 04, 2025

Linux

Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide. This medium-severity vulnerability (CVSS 6.0) requires local access and high-level privileges to exploit, but can impact system confidentiality by allowing an attacker to read sensitive information across security boundaries without user interaction. Security teams should monitor for patches between the vendor deadline of April 3, 2026, and implement access controls to restrict high-privilege user capabilities on Linux systems.

Advisory Details
Researcher Discovered by: Lucas Leong (@_wmliang_) of Trend Zero Day Initiative
Reported December 04, 2025
Deadline April 03, 2026 14d overdue
CVSS Vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy