ZDI-26-999: Linux Kernel Proc File System Pagemap Scan Use-After-Free Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in the Linux Kernel's proc file system pagemap scan functionality. Exploitation requires an attacker to have the ability to execute low-privileged code on the system. The vulnerability is rated with a high severity score of 8.8 by the Zero Day Initiative.

• zerodayinitiative.com/advisories/ZDI-26-999/ (opens in a new tab)

• ZDI-26-1000: Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1001: Linux Kernel SCTP Subsystem Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1002: Linux Kernel Net Scheduler Qdisc Improper Validation of Array Index Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1005: Linux Kernel eBPF Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1006: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13