TI-2026-56867 CVE-2026-82474 · GHSA-36m7-65w5-jm6c
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
Priority LOW 38
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-09-08 · Red Hat rating Important · View on Red Hat →
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.