Trend Micro's ZDI apparently slipped: multiple unpatched high-severity Linux kernel flaws published straight to LKML

Trend Micro's Zero Day Initiative reportedly sent multiple Linux kernel vulnerability reports — some rated up to CVSS 9.0 and still unpatched — directly to the public Linux Kernel Mailing List. The reports should have gone through coordinated private disclosure. It matters because publishing unpatched kernel flaws gives attackers a head start on millions of systems before fixes exist.

• LinuxDo2026-10-23 04:58