Definition. A local privilege escalation flaw located directly in the Linux kernel, e.g. in subsystems such as memory management, filesystems, eBPF or the network stack. A successful exploit typically grants kernel privileges and with them effectively full system control, including bypassing container and user namespace boundaries.

Why it matters. Kernel LPE flaws are particularly critical in multi-tenant environments and Kubernetes clusters because they can weaken container isolation. Fast, orderly patching of the worker nodes is mandatory here, not optional.

Related. Local Privilege Escalation (LPE), Container Escape, CVE, Kernel Hardening, Page Cache, Copy-on-Write (COW)