ZDI publishes 10 Linux kernel advisories, none with fixes
First merged summary.
ZDI published 10 Linux kernel advisories on November 13, 2026, with no fixes or exploitation status stated.
ZDI published 10 Linux kernel advisories on November 13, 2026. The highest-rated issue, ZDI-26-998, is an integer underflow in KSMBD that can allow remote code execution only when SMB Direct is enabled; authentication depends on configuration, and ZDI rates it 9.0. Other notices cover local privilege escalation and information disclosure in ksmbd, skbuff, the network scheduler, procfs, SCTP, BPF, eBPF, and GSM multiplexing. Named identifiers are CVE-2026-99284, CVE-2026-98797, CVE-2026-64138, CVE-2026-98130, and CVE-2024-50073. No advisory states a fixed version or known exploitation.
- ZDI-26-998 is KSMBD SMB Direct integer underflow RCE, CVSS 9.0, no CVE named.
- CVE-2026-98797 is a qdisc array-index flaw rated CVSS 8.8; low-privileged code required.
- CVE-2026-99284 and CVE-2026-98130 are local privilege escalations rated CVSS 7.8.
- CVE-2026-64138 is an authenticated ksmbd out-of-bounds read rated CVSS 7.1.
- ZDI-26-1004 is unauthenticated ksmbd information disclosure rated CVSS 6.3.
- CVE-2024-50073 is a GSM multiplexing race requiring high-privileged code, rated 7.5.
Timeline
dated events in the reporting · oldest first- Nov 13, 2026ZDI published 10 Linux kernel vulnerability advisories. · ZDI Published Advisories
What each outlet adds
beyond the shared facts- ZDI Published AdvisoriesLists advisory IDs, CVSS scores, prerequisites, and five CVE identifiers.
- Vendors
- Linux
- Organizations
- Zero Day Initiative
Coverage
oldest first · one row per article · UTC- · 1d ago
ZDI Published AdvisoriesFirst report
Linux kernel qdisc flaw allows local privilege escalation (CVE-2026-98797)
ZDI rates CVE-2026-98797 at CVSS 8.8; exploitation requires existing low-privileged code execution.
- · 1d ago
Linux ksmbd out-of-bounds read can leak information
CVE-2026-64138 requires authentication and affects only systems with ksmbd enabled.
- · 1d ago
Unauthenticated Linux ksmbd flaw can disclose information
Only kernels with ksmbd enabled are affected; ZDI rates the issue CVSS 6.3.
- · 1d ago
Linux kernel GSM race allows local privilege escalation (CVE-2024-50073)
Exploitation requires existing high-privileged code; ZDI assigned a CVSS rating of 7.5.
- · 1d ago
Linux kernel BPF local storage race can escalate privileges
ZDI rates the flaw CVSS 7.5 and says an attacker must already run high-privileged code.
- · 1d ago
Linux kernel SCTP race allows local privilege escalation (CVE-2026-98130)
ZDI rates the SCTP race at CVSS 7.8 and says low-privileged local code is required.
- · 1d ago
Linux kernel skb_zerocopy flaw allows local privilege escalation
ZDI rates CVE-2026-99284 at CVSS 7.8; an attacker needs low-privileged code execution first.
- · 1d ago
Linux kernel eBPF race allows local privilege escalation
ZDI rates the flaw 7.5, and exploitation requires code that is already high-privileged.
- · 1d ago
Linux Kernel KSMBD integer underflow allows remote code execution
Only systems with SMB Direct enabled are affected; authentication depends on configuration, and ZDI rates it 9.0.
- · 1d ago
Linux kernel pagemap use-after-free allows local privilege escalation
ZDI rates the procfs pagemap scan use-after-free at CVSS 8.8; low-privileged local code is required.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-50073 | Linux kernel: tty: n_gsm | 7.8 | <1% | ||
| CVE-2026-64138 | Linux kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid()… | 8.8 | <1% | ||
| CVE-2026-98130 | Linux kernel: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | 8.1 | — | ||
| CVE-2026-98797 | Array index flaw in Linux kernel taprio TX queue mapping | — | — | ||
| CVE-2026-99284 | Local privilege escalation in Linux kernel skb_zerocopy | — | — |