Linux kernel eBPF race allows local privilege escalation
Original title: ZDI-26-1005: Linux Kernel eBPF Race Condition Local Privilege Escalation Vulnerability
ZDI rates the flaw 7.5, and exploitation requires code that is already high-privileged.
ZDI published ZDI-26-1005, a race condition in Linux kernel eBPF that can let local attackers escalate privileges. The attacker must already be able to execute high-privileged code on the target. ZDI assigned a CVSS rating of 7.5. The snippet names no CVE, fixed version, or exploitation status.
Unconfirmed: No CVE identifier is given in the advisory snippet.
- Advisory identifier is ZDI-26-1005.
- ZDI CVSS rating is 7.5.
- The flaw is described as an eBPF race condition.
- High-privileged local code execution is a prerequisite.
Impact: Local privilege escalation from high-privileged code
| Product | Affected |
|---|---|
| Linux Kernel | — |
- Vendors
- Linux
- Products
- Linux Kernel
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.