PT-2026-90059 · Linux · Linux

CVE-2026-80929

·

Published

2026-09-11

·

Updated

2026-09-11

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
sysctl: move the "cad pid" entry from pid table[] to kern reboot table[]
cad pid is global, and kill cad pid() is only used in the root namespace.
However, due to pid table root permissions(), a non-root user can unshare pid/user namespaces and modify it from the child namespace. This makes no sense and is simply wrong.
Move it to kern reboot table[] where it logically belongs; this ensures that only GLOBAL ROOT UID can read/modify this sysctl.
Note that this patch doesn't preserve "#ifdef CONFIG PROC SYSCTL" around the "cad pid"; CONFIG PROC SYSCTL selects CONFIG SYSCTL, so it is always set when kern reboot table[] is compiled.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80929

Affected Products

Linux