ZDI-CAN-29316: ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability
Published Sep 14, 2026
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-31719.
Affected Software
1 affected component
Linux Kernel
Event History
Sep 14, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
Does network reachability alone expose a system to exploitation?
No. Exploitation requires an attacker to first obtain the ability to execute low-privileged code on the target system.
2
What identifier should be used to track this issue?
Track this vulnerability as CVE-2026-31719. The associated ZDI advisory is ZDI-26-680.
3
What severity ratings were assigned?
ZDI assigned a CVSS rating of 8.8. The listed risk score is 49.