CVE-2026-80844: ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-80844

EPSS 0.00 EPSS k 2. 11. 2026

Pro tohle CVE zatím žádné hodnocení CVSS nemám. Buď ho záznam CVE Programu neuvádí, nebo ještě nebyl vydaný — advisories často citují rezervované ID dřív, než záznam vznikne.

· zachyceno

ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-80844.

EPSS 0.00 CVSS 8.8 CVE-2026-80844 Linux US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-834: Linux Kernel IPv6 AH Routing Header Integer Underflow Local Privilege Escalation Vulnerability

· zachyceno

Linux Kernel — Four Public Local-Root Vulnerabilities

Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 8.8, CVEs: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, CVE-2026-74469, Summary: A coordinated disclosure has made public four Linux kernel vulnerabilities capable of local privilege escalation to root: DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) and DiagSpill (CVE-2026-74469). Public proof-of-concept exploits are available. The first three generally require…

EPSS 0.01 CVSS 8.8 CVE-2026-68121 CVE-2026-74469 CVE-2026-80844 CVE-2026-81000 Linux FI

tg: zranitelnost

· zachyceno · NCSC-FI · Linux Kernel — Four Public Local-Root Vulnerabilities