← Back

CVE-2026-49413

nvd nist
Published: Jun 27, 2026Modified: Jul 1, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where the auxiliary vector is constructed, so AT_SECURE was incorrectly set to zero for set-user-ID and set-group-ID executables. An unprivileged local user can inject a shared library via LD_PRELOAD into a set-user-ID or set-group-ID Linux binary, gaining the privileges of that binary.

Affected (31)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
31 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 14.3
Freebsd
Version 14.3 p10
Freebsd
Version 14.3 p11
Freebsd
Version 14.3 p12
Freebsd
Version 14.3 p13
Freebsd
Version 14.3 p14
Freebsd
Version 14.3 p1
Freebsd
Version 14.3 p2
Freebsd
Version 14.3 p3
Freebsd
Version 14.3 p4
Freebsd
Version 14.3 p5
Freebsd
Version 14.3 p6
Freebsd
Version 14.3 p7
Freebsd
Version 14.3 p8
Freebsd
Version 14.3 p9
Freebsd
Version 14.4
Freebsd
Version 14.4 p1
Freebsd
Version 14.4 p2
Freebsd
Version 14.4 p3
Freebsd
Version 14.4 p4
Freebsd
Version 14.4 p5
Freebsd
Version 15.0
Freebsd
Version 15.0 p1
Freebsd
Version 15.0 p2
Freebsd
Version 15.0 p3
Freebsd
Version 15.0 p4
Freebsd
Version 15.0 p5
Freebsd
Version 15.0 p6
Freebsd
Version 15.0 p7
Freebsd
Version 15.0 p8
Freebsd
Version 15.0 p9

Related CWEs

CWE-266
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References (1)

Source: secteam@freebsd.org
Vendor Advisory

Timeline

No history available yet.