ZDI-26-837: Linux Kernel XFRM Subsystem Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-98231.
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected Linux Kernel installations are exposed when an attacker can execute low-privileged code locally on the system. The issue is a local privilege-escalation vulnerability rather than a remotely exploitable issue based on the available information.
What access does an attacker need to exploit it?
The attacker must first be able to execute low-privileged code on the target system. The provided information does not identify any additional prerequisites or affected default configuration.
What is the potential impact of successful exploitation?
A successful attacker can escalate privileges on the affected Linux system. ZDI assigned the issue a CVSS rating of 7.8.