VulnerabilityPublished 13 Aug 2026

ZDI-26-568: Linux Kernel Net Scheduler Race Condition Local Privilege Escalation Vulnerability

Source Zero Day Initiative

Severity

High

Rated High by Zero Day Initiative

Data as of 21 Aug 2026, 17:34 UTC

What to do

AI-suggested

Linux has issued an official update that addresses this vulnerability. Applying the vendor-provided patch from the referenced Linux kernel commit is the recommended remediation. Users should update their Linux Kernel to the fixed version as soon as possible to mitigate this risk.

Description

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.

Impact

Local attackers with existing high-privilege code execution capabilities can exploit this race condition to escalate privileges further and execute arbitrary code in kernel mode. This can compromise system integrity, confidentiality, and availability.

Summary

This vulnerability, identified as ZDI-26-568, affects the Linux Kernel's network scheduler component. It arises from a race condition due to lack of proper locking when manipulating tcf_tunnel_key_params objects. Exploitation requires the attacker to already have the ability to execute high-privileged code locally. Successful exploitation enables privilege escalation and arbitrary code execution within the kernel context. The vulnerability has a CVSS score of 7.5, indicating high severity. Linux has released a patch to correct this flaw, as referenced in the official Linux kernel commit.

References

zerodayinitiative.com/advisories/ZDI-26-568/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 13 Aug 2026, 20:48 UTC

References

Community reviews

Related threats