ZDI-26-837: Linux Kernel XFRM Subsystem Use-After-Free Local Privilege Escalation Vulnerability

Summary by Cyber Security News29 Oct 2026, 06:00 CET

About this summary. This is a short excerpt from the description that Zero Day Initiative published with its article. Cyber Security News did not report or verify the underlying story. Read the original: http://www.zerodayinitiative.com/advisories/ZDI-26-837/

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.

Read the full article at Zero Day Initiative →

Source attribution: headline and facts are from Zero Day Initiative (zerodayinitiative.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

ZDI-26-836: Linux Kernel CIFS File System Use-After-Free Privilege Escalation Vulnerability

ZDI-26-835: Linux Kernel Logitech HIDPP Protocol Use-After-Free Local Privilege Escalation Vulnerability

ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)

OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries

sshole: OpenSSH Fixes Password Bypass on Alpine Linux