As cited
Copy frozen at (site build).
vulnerabilities
Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
Researchers discovered CVE-2026-43502, a local privilege escalation vulnerability in the Linux kernel's RDS zerocopy send path, named ZcopyReaper. The flaw has existed since Linux v4.17 and was patched in commit 44b550d88b26, with the fix appearing in Linux v7.1-rc3. The team demonstrated successful exploitation on openSUSE with kernel 6.4.0-150600.23.100.
Why it matters: Linux administrators and practitioners managing systems on kernels between v4.17 and v7.1-rc3 need to patch immediately, as local users can escalate privileges without additional exploits or credentials.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
Researchers disclosed a local privilege escalation (LPE) vulnerability in the Linux kernel's RDS zerocopy send path, tracked as CVE-2026-43502 and dubbed ZcopyReaper. The flaw was introduced in Linux v4.17 and fixed in Linux v7.1-rc3 via commit 44b550d88b26, with successful exploitation demonstrated on openSUSE running kernel 6.4.0-150600.23.100.
Why it matters: Linux system administrators and distribution maintainers need to patch systems running vulnerable kernels between v4.17 and before v7.1-rc3 to prevent local attackers from gaining privilege escalation.
- Source published
- First seen by Cybersecurity Tracker