ZDI-CAN-28893 HIGH 8.2 Upcoming Jan 13, 2026

Linux

A high-severity vulnerability (CVSS 8.2) has been discovered in Linux that requires local access and high-level privileges to exploit, but once executed can compromise system confidentiality, integrity, and availability across multiple systems. The attack is straightforward to execute with no user interaction needed, making it dangerous in environments where privileged users may be compromised or untrusted. Security teams should monitor for privilege escalation attempts and ensure timely patching once Linux releases a fix by the May 2026 deadline.

Advisory Details
Researcher Discovered by: Lucas Leong (@_wmliang_) of Trend Zero Day Initiative
Reported January 13, 2026
Deadline May 13, 2026 26d
CVSS Vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy