Alexander Leidinger

**Name of the Vulnerable Software and Affected Versions** OpenBSD hwpmc (affected versions not specified) **Description** An issue exists in the `hwpmc(4)` driver where an inverted check occurs when a process calls `execve(2)` to execute a setuid or setgid image. This failure to properly detach Performance Monitoring Counters (PMCs) allows an unprivileged local user who has attached PMCs to a process to continue monitoring that process after it executes a setuid or setgid binary, violating the intended security policy. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A logic error occurs where `PRIV KTRACE` is consistently denied to a root user within a jail. Consequently, tracing configured by a jailed root user is not flagged as privileged. This allows an unprivileged user in the same jail, provided they have permission to debug the target process, to modify the jailed root user's `ktrace(2)` flags or disable tracing entirely, preventing the jailed root user from reliably tracing unprivileged processes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.