https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:47:20 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-11345 bdu:2026-11345 https://vulnerability.circl.lu/vuln/bdu:2026-11345 https://vulnerability.circl.lu/vuln/fkie_cve-2026-49415 <p>During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process&#39;s memory via procfs or linprocfs, because the kernel&#39;s debugging permission check still saw the original credentials.</p> <p>An unprivileged local user can exploit this race to modify the address space of a SUID binary before its credentials are elevated, potentially gaining full control of the affected system.</p> <p>During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process&#39;s memory via procfs or linprocfs, because the kernel&#39;s debugging permission check still saw the original credentials.</p> <p>An unprivileged local user can exploit this race to modify the address space of a SUID binary before its credentials are elevated, potentially gaining full control of the affected system.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-49415 https://vulnerability.circl.lu/vuln/ghsa-c9vm-fv4g-fr7v <p>During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process&#39;s memory via procfs or linprocfs, because the kernel&#39;s debugging permission check still saw the original credentials.</p> <p>An unprivileged local user can exploit this race to modify the address space of a SUID binary before its credentials are elevated, potentially gaining full control of the affected system.</p> <p>During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process&#39;s memory via procfs or linprocfs, because the kernel&#39;s debugging permission check still saw the original credentials.</p> <p>An unprivileged local user can exploit this race to modify the address space of a SUID binary before its credentials are elevated, potentially gaining full control of the affected system.</p> https://vulnerability.circl.lu/vuln/ghsa-c9vm-fv4g-fr7v