DETECTING AND MITIGATING ZDI-CAN-33367 AND FIVE OTHER LINUX FLAWS

Summary from the TLDR DevOps newsletter

A working root exploit for Linux kernel bug ZDI-CAN-33367 is public before a CVE or fix is available. TuxCare reproduced the proof of concept for local privilege escalation on Ubuntu, Debian, and AlmaLinux. A separate patch for the flaw is reviewed but not merged, and none of the six disclosed bugs has a CVE ID yet.