PT-2026-43689

In the Linux kernel, the following vulnerability has been resolved: ima: Fix stack-out-of-bounds in is bprm creds for exec KASAN reported a stack-out-of-bounds access in ima appraise measurement from is bprm creds for exec: BUG: KASAN: stack-out-of-bounds in ima appraise measurement+0x12dc/0x16a0...

Command Injection

Overview yt-dlp is an A youtube-dl fork with additional features and patches Affected versions of this package are vulnerable to Command Injection via the function parsecmd in the class ExecPP, which the --exec process on Windows uses with the default placeholder. An attacker can execute arbitrar...

CVE-2022-50095

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Cleanup CPU timers before freeing them during exec Commit 55e8c8eb2c7b "posix-cpu-timers: Store a reference to a pid not a task" started looking up tasks by PID when deleting a CPU timer. When a non-leader threa...

CVE-2024-43882

In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via dofilpopen, permission checking is done against the file's metadata at that moment, and on success, a file pointer is passed back. Much...