CVE-2026-49413

CVE-2026-49413 describes a flaw in FreeBSD’s Linuxulator: during execve for setuid/setgid Linux binaries, the P_SUGID flag is not yet set, causing AT_SECURE to be 0 in the ELF auxiliary vector. This missetting enables an unprivileged local user to inject a shared library via LD_PRELOAD into a set...