https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:06:41 +0000 https://vulnerability.circl.lu/vuln/cve-2026-90347 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>arm64: ptrace: Keep &#39;orig_x0&#39; in-sync with x0 on syscall entry</p> <p>Commit e057b9477232 (&#34;arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates&#34;) attempted to resolve a long-standing issue with syscall entry tracing, where a tracer is able to manipulate the first syscall argument without being subjected to seccomp or audit checking.</p> <p>Unfortunately, that fix was incomplete [1], as it failed to update &#39;orig_x0&#39; between a tracer updating x0 during a seccomp ptrace exit (SECCOMP_RET_TRACE) and the seccomp filter being re-evaluated.</p> <p>Rather than add hooks to the core seccomp code, instead move the synchronisation code into the ptrace GPR and syscall setting code so that &#39;orig_x0&#39; is kept up to date with x0 whenever we&#39;re stopped on the syscall entry path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>arm64: ptrace: Keep &#39;orig_x0&#39; in-sync with x0 on syscall entry</p> <p>Commit e057b9477232 (&#34;arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates&#34;) attempted to resolve a long-standing issue with syscall entry tracing, where a tracer is able to manipulate the first syscall argument without being subjected to seccomp or audit checking.</p> <p>Unfortunately, that fix was incomplete [1], as it failed to update &#39;orig_x0&#39; between a tracer updating x0 during a seccomp ptrace exit (SECCOMP_RET_TRACE) and the seccomp filter being re-evaluated.</p> <p>Rather than add hooks to the core seccomp code, instead move the synchronisation code into the ptrace GPR and syscall setting code so that &#39;orig_x0&#39; is kept up to date with x0 whenever we&#39;re stopped on the syscall entry path.</p> https://vulnerability.circl.lu/vuln/cve-2026-90347