CVE-2026-78408

Name of the Vulnerable Software and Affected Versions util-linux (affected versions not specified)

Description The nsenter tool contains an issue where the --join-cgroup option opens the target cgroup.procs file as root and maintains that file descriptor during subsequent namespace and credential changes, as well as across execve(). Since the kernel validates cgroup migrations based on the credentials from the initial open, a program within an attacker-controlled target can inherit root privileges to move host processes between cgroups. This allows an unprivileged user to migrate and terminate unrelated root processes after a privileged operator uses the --join-cgroup option against the target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.