Linux kernel XFRM use-after-free allows local privilege escalation
ZDI rates CVE-2026-98231 at CVSS 7.8; low-privileged local code execution is required first.
Stories per day · 30 days
3 RSS
3 stories, newest first · one card per story
Stories tagged #xfrm
ZDI-26-576: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
ZDI disclosed a race condition local privilege escalation flaw in the Linux Kernel XFRM subsystem, CVSS 7.5, with no CVE assigned.
ZDI-26-572: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
ZDI publishes ZDI-26-572, a CVSS 7.5 race condition local privilege escalation in the Linux kernel's XFRM subsystem.