ZDI-CAN-28821
HIGH 8.2
Upcoming
Feb 12, 2026
Linux
Linux has a high-severity vulnerability (CVSS 8.2) that requires local access and elevated privileges to exploit, but causes severe impact across confidentiality, integrity, and availability once compromised. The attack vector indicates an authenticated local attacker with high privileges can escalate their capabilities to affect the entire system. Security teams should monitor for privilege escalation attempts and unusual activities from high-privileged local accounts on Linux systems, particularly after the June 12, 2026 vendor deadline passes.
Advisory Details
Researcher
p0ch1ta and sh4dy
Reported
February 12, 2026
Deadline
June 12, 2026
57d
CVSS Vector
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H