ZDI-CAN-28893
HIGH 8.2
Upcoming
Jan 13, 2026
Linux
A high-severity vulnerability (CVSS 8.2) has been discovered in Linux that requires local access and high-level privileges to exploit, but once executed can compromise system confidentiality, integrity, and availability across multiple systems. The attack is straightforward to execute with no user interaction needed, making it dangerous in environments where privileged users may be compromised or untrusted. Security teams should monitor for privilege escalation attempts and ensure timely patching once Linux releases a fix by the May 2026 deadline.
Advisory Details
Researcher
Discovered by:
Lucas Leong (@_wmliang_) of Trend Zero Day Initiative
Reported
January 13, 2026
Deadline
May 13, 2026
26d
CVSS Vector
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H