Re: Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
oss-security thread discusses newly disclosed Linux kernel local privilege escalations, including ZcopyReaper (CVE-2026-43502) and about 20 more flaws.
An oss-security mailing list thread discusses newly disclosed Linux kernel local privilege escalation (LPE) issues, headlined by ZcopyReaper (CVE-2026-43502) along with roughly 20 more. Discussants ask whether the many reports could be summarized and note that locking kernel module loading after boot has repeatedly proven an effective mitigation. The visible discussion does not state whether any of the flaws are exploited in the wild or give specific patch guidance beyond the individual reports.
- Thread headline lists ZcopyReaper as CVE-2026-43502 alongside about 20 additional kernel LPEs.
- One commenter notes locking kernel module loading after boot has paid off many times as mitigation.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-43502 | Linux kernel: net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | <1% |
From the original article
Posted by Dr. Thomas Orgis on Sep 08 Do we need an LLM agent to dig through the reports and give a summary where the vulnerabilities lie and what the mitigation would be? Am Mon, 7 Sep 2026 20:29:16 -0700 schrieb Yuan Tan : Good.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.