Security54 mOctober 26, 2026, 21:00

Public root exploit for Linux kernel flaw released before patch

Sysdig reported that a working PoC for ZDI-CAN-33367, a local privilege escalation in the Linux networking stack rated CVSS 7.8, went public before a CVE ID or upstream fix. TuxCare reproduced a root shell on AlmaLinux 8–10, CloudLinux 9–10, Debian 12–13 and Ubuntu 24.04/26.04. ZDI sent six reports to maintainers, several still unfixed.

Infosecurity Magazine

Open source

Public root exploit for Linux kernel flaw released before patch

ZDI-CAN-33367 is an LPE in the kernel networking stack rated CVSS 7.8
Root shell reproduced on AlmaLinux, CloudLinux, Debian and Ubuntu
Two ksmbd flaws rated 9.0, one remote and pre-authentication
Sysdig advises unloading ksmbd and restricting port 445

#Linux#Sysdig#ZDI#TuxCare

Vghost Linux kernel flaw gives local users root and breaks VM isolation

Security

Four Linux kernel local root flaws disclosed: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

Security

OpenBSD root exploit chains 37-year-old BSD bug with kernel flaw

Security

Public root exploit for Linux kernel flaw released before patch

Vghost Linux kernel flaw gives local users root and breaks VM isolation

Four Linux kernel local root flaws disclosed: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

OpenBSD root exploit chains 37-year-old BSD bug with kernel flaw

Zero Day Initiative accidentally posts unpatched Linux kernel flaws to public LKML