Detecting and Mitigating ZDI-CAN-33367 and Five Other Linux Flaws
Sysdig, Wednesday, October 28th, 2026
Sysdig covers ZDI-CAN-33367 and five other Linux flaws disclosed with public exploit details before CVEs or merged fixes, plus patch status.
Trend Micro's Zero Day Initiative sent a ConnMan bug report to a public mailing list on October 20, 2026, and five Linux kernel reports on October 21, copying public lists with reproduction details.
Several had no patch or fix in any released kernel, and a working root exploit became public before a CVE or merged fix.
Two flaws are rated CVSS 9.0.
AlmaLinux 9 has a fixed kernel, KernelCare shipped rebootless patches for EL10 and EL9, and Debian and Ubuntu fixes have no date.