1489 matches found
bubblewrap: bubblewrap: Privilege escalation via ptrace when installed in setuid mode
A flaw was found in bubblewrap when operating in setuid mode. A local user may use ptrace to interfere with the sandbox setup process and gain access to privileged operations that are normally restricted. This could allow an attacker to bypass intended sandboxing restrictions and potentially...
CVE-2026-49426
When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...
CVE-2026-49426
The FreeBSD kernel is vulnerable to a flaw in the audit(4) facility when handling system calls executed via ptrace(2) with the PT_SC_REMOTE operation. The kernel incorrectly passes the return value of an internal setup function to AUDIT_SYSCALL_EXIT() instead of the actual system call result. Con...
EUVD-2026-62295
When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...
CVE-2026-49426 Incorrect audit records for ptrace(2) syscall requests
When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...
CVE-2026-49426 Incorrect audit records for ptrace(2) syscall requests
When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...
CVE-2026-49426: Omission of Security-relevant Information
When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099712)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099712 advisory. In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100513)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100513 advisory. In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink...
The vulnerability of the mechanism for recording audit entries for system calls to the ptrace() function in the operating system kernel of FreeBSD allows a perpetrator to bypass existing security mechanisms.
The vulnerability of the mechanism for recording audit entries for system calls to the ptrace function in FreeBSD operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms...
CVE-2026-68171
A flaw was found in the Linux kernel's arm64 syscall handling. A local attacker with the ability to trace processes using ptrace could manipulate syscall arguments after security checks like seccomp, or secure computing mode have been performed. This occurs because the kernel's internal record of...
arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
...
CVE-2026-68171
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2026-55557
In the Linux kernel, the following vulnerability has been resolved: arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 "arm64: add seccomp support", seccomp was erroneously called before the ptrace...
CVE-2026-68171
The CVE describes an arm64 Linux kernel issue where the original x0 saved in orig_x0 could diverge from the live x0 when a tracer (ptrace/seccomp/audit) updated the syscall argument during a syscall-enter-stop. The fix re-syncs orig_x0 from x0 on syscall entry after a potential ptrace stop (PTRAC...
CVE-2026-68171 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
In the Linux kernel, the following vulnerability has been resolved: arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 "arm64: add seccomp support", seccomp was erroneously called before the ptrace...
Linux Distros Unpatched Vulnerability : CVE-2026-68171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 arm64: add seccomp suppor...
B&R Automation X20EDS410 Improper Privilege Management (CVE-2026-46333)
The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's ptrace getdumpable logic used by ptracemayaccess. Successful local exploitation of this vulnerability could allow an authenticated attacker with low privileges to escala...
CVE-2026-64375
A flaw was found in the Linux kernel's proc filesystem. A local attacker with low privileges could exploit a race condition within the ptracemayaccess function when handling file descriptor links. This vulnerability arises because the system performs multiple task lookups without proper...