Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo (CVE-2026-82474)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo due to a failure to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Sudo is used in our Speech Service Runtimes. This vulnerability has been addressed...

CVE-2026-82474

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...