ZDI 2026-08-24

ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability

Machine-generated analysis · WAYSCloud LLM

The vulnerability is a use-after-free in the Linux kernel net scheduler packet classifier. Exploitation requires prior low-privileged code execution.

Context

The Linux kernel net scheduler packet classifier is affected. It contains a use-after-free flaw that can be leveraged for local privilege escalation. Exploitation requires the attacker to already run code with limited privileges on the system.

Operator considerations

Check: Verify kernel version and whether the net scheduler packet classifier is enabled.

From Zero Day Initiative ↗

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.

Read the full advisory on ZDI →

Related advisories