ZDI-CAN-28594
MEDIUM 6.0
Overdue
Dec 04, 2025
Linux
Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide. This medium-severity vulnerability (CVSS 6.0) requires local access and high-level privileges to exploit, but can impact system confidentiality by allowing an attacker to read sensitive information across security boundaries without user interaction. Security teams should monitor for patches between the vendor deadline of April 3, 2026, and implement access controls to restrict high-privilege user capabilities on Linux systems.
Advisory Details
Researcher
Discovered by:
Lucas Leong (@_wmliang_) of Trend Zero Day Initiative
Reported
December 04, 2025
Deadline
April 03, 2026
14d overdue
CVSS Vector
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N