Re: ZDI-CAN-33367: New Vulnerability Report

[Eric Dumazet]

Le mer. 21 oct. 2026 à 23:47, zdi-disclosures@xxxxxxxxxxxxxx
<zdi-disclosures@xxxxxxxxxxxxxx> a écrit :
>
> ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability
>
> -- CVSS -----------------------------------------
>
> 7.8: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
>
> -- ABSTRACT -------------------------------------
>
> Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products:
> Linux - Kernel
>
> -- VULNERABILITY DETAILS ------------------------
> * Version Tested:7.3-rc1
> * Platform Tested:debian trixie
>

I had to cut this report. Way too long, I could not see a patch in it.

We were fortunate to receive a report with a patch from another source
one week ago. Patch will be available soon.