CVE-2026-89603

CVE-2026-89603 is a race condition in the Linux kernel's syscall_trace_enter() that allows seccomp filter bypass via ptrace. When a thread is stopped for ptrace, another thread can install a seccomp filter with SECCOMP_FILTER_FLAG_TSYNC; however, syscall_trace_enter() evaluates a cached 'work' va...

CVE-2026-89603

In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscalltraceenter for ptrace, another thread can install a seccomp filter with SECCOMPFILTERFLAGTSYNC e.g...