50
Re: Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
Linux kernel developers discuss a batch of 21 local privilege escalation CVEs, including ZcopyReaper (CVE-2026-43502) in the RDS networking driver.
An oss-security thread examines newly published Linux kernel local privilege escalation issues tracked in the kernel.org security vulnerabilities git repository. CVE-2026-43502, dubbed ZcopyReaper, affects the net/rds (Reliable Datagram Sockets) subsystem. The discussion references roughly 20 additional kernel LPE CVEs published in the 2026 Q3 window.
45
50
Re: Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
oss-security thread discusses newly disclosed Linux kernel local privilege escalations, including ZcopyReaper (CVE-2026-43502) and about 20 more flaws.
An oss-security mailing list thread discusses newly disclosed Linux kernel local privilege escalation (LPE) issues, headlined by ZcopyReaper (CVE-2026-43502) along with roughly 20 more. Discussants ask whether the many reports could be summarized and note that locking kernel module loading after boot has repeatedly proven an effective mitigation. The visible discussion does not state whether any of the flaws are exploited in the wild or give specific patch guidance beyond the individual reports.
45
30
35
50
50
50
35
50
ZDI-26-686: Linux Kernel nftables Race Condition Local Privilege Escalation Vulnerability
ZDI discloses CVE-2026-74565, a CVSS 7.8 nftables race condition letting local low-privileged attackers escalate privileges on Linux.
ZDI-26-686 describes a race condition in the Linux Kernel nftables subsystem that allows local attackers to escalate privileges. Exploitation requires the ability to execute low-privileged code on the target system. ZDI assigned a CVSS rating of 7.8 and CVE-2026-74565.
30
35
USN-8726-1: Linux kernel vulnerabilities
Ubuntu issued kernel security update USN-8726-1 fixing an Arm TLB invalidation flaw (CVE-2025-10263) that enables local privilege escalation, plus other kernel fixes.
Ubuntu released USN-8726-1, a security update for the generic Linux kernel. It fixes CVE-2025-10263, where certain Arm processors complete broadcast TLB invalidation before related memory writes are globally observed, potentially letting local attackers bypass memory protections or escalate privileges. The update also addresses additional kernel flaws in ARM64, ARM32, RISC-V, S390 and other subsystems.
28
35
35
45
35
50
30
50
30
35
45
30
50
35
45
35
35
35
35
30
35
50
50
35
35
35
30