As cited
Copy frozen at (site build).
vulnerabilities
Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
Researchers discovered CVE-2026-43502, a local privilege escalation vulnerability in the Linux kernel's RDS zerocopy send path, named ZcopyReaper. The flaw has existed since Linux v4.17 and was patched in commit 44b550d88b26, with the fix appearing in Linux v7.1-rc3. The team demonstrated successful exploitation on openSUSE with kernel 6.4.0-150600.23.100.
Why it matters: Linux administrators and practitioners managing systems on kernels between v4.17 and v7.1-rc3 need to patch immediately, as local users can escalate privileges without additional exploits or credentials.
- Source published
- First seen by Cybersecurity Tracker