Linux kernel pagemap use-after-free allows local privilege escalation
Original title: ZDI-26-999: Linux Kernel Proc File System Pagemap Scan Use-After-Free Local Privilege Escalation Vulnerability
ZDI rates the procfs pagemap scan use-after-free at CVSS 8.8; low-privileged local code is required.
ZDI published ZDI-26-999, a use-after-free in the Linux kernel proc file system pagemap scan path that can escalate privileges locally. An attacker must already be able to run low-privileged code. ZDI assigned a CVSS rating of 8.8. The advisory text does not name a CVE, a fixed version, or exploitation.
- The flaw is a use-after-free in procfs pagemap scan.
- ZDI advisory identifier is ZDI-26-999.
- No CVE identifier appears in the advisory text.
- No affected or fixed kernel versions are stated.
Impact: local privilege escalation from low-privileged code
| Product | Affected |
|---|---|
| Linux Kernel | — |
- Vendors
- Linux
- Products
- Linux Kernel
- Organizations
- Zero Day Initiative
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.