ZeroHour
ZDI Published Advisoriespublished ()ingested

ZDI-26-569: Linux Kernel Net Scheduler True Link Equalizer Race Condition Local Privilege Escalation Vulnerability

lowAdvisoryimportance 15
AI summary · glm-5.3-flash

ZDI publishes ZDI-26-569, a CVSS 7.5 race condition local privilege escalation in the Linux kernel net scheduler true link equalizer.

The Zero Day Initiative disclosed a race condition in the Linux kernel's net scheduler true link equalizer component enabling local privilege escalation. Exploitation requires the attacker to first run high-privileged code on the target system. The advisory carries a CVSS rating of 7.5; no CVE id is listed in the disclosure text.

  • Race condition LPE in Linux kernel net scheduler TEQL component
  • Requires prior high-privileged code execution to exploit
  • CVSS 7.5, published as ZDI-26-569
Full article

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.

This source does not provide full text. Read it at zerodayinitiative.com.