ZDI-26-1005: Linux Kernel eBPF Race Condition Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in the Linux Kernel's eBPF subsystem. Exploitation requires the attacker to already have the ability to execute high-privileged code on the target system. The vulnerability has a high severity rating assigned by the Zero Day Initiative.

• zerodayinitiative.com/advisories/ZDI-26-1005/ (opens in a new tab)

• ZDI-26-999: Linux Kernel Proc File System Pagemap Scan Use-After-Free Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1000: Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1001: Linux Kernel SCTP Subsystem Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1002: Linux Kernel Net Scheduler Qdisc Improper Validation of Array Index Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1006: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13