PT-2026-90059 · Linux · Linux

CVE-2026-80929

·

Publicado

2026-09-11

·

Atualizado

2026-09-11

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
sysctl: move the "cad pid" entry from pid table[] to kern reboot table[]
cad pid is global, and kill cad pid() is only used in the root namespace.
However, due to pid table root permissions(), a non-root user can unshare pid/user namespaces and modify it from the child namespace. This makes no sense and is simply wrong.
Move it to kern reboot table[] where it logically belongs; this ensures that only GLOBAL ROOT UID can read/modify this sysctl.
Note that this patch doesn't preserve "#ifdef CONFIG PROC SYSCTL" around the "cad pid"; CONFIG PROC SYSCTL selects CONFIG SYSCTL, so it is always set when kern reboot table[] is compiled.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-80929

Produtos afetados

Linux