Back to overview

CVE-2026-49413

Description
The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where the auxiliary vector is constructed, so AT_SECURE was incorrectly set to zero for set-user-ID and set-group-ID executables. An unprivileged local user can inject a shared library via LD_PRELOAD into a set-user-ID or set-group-ID Linux binary, gaining the privileges of that binary.

Metadata

CVE ID
CVE-2026-49413
State
PUBLISHED
Assigner
freebsd
Reserved
2026-05-29 20:24 UTC
Published
2026-06-27 09:08 UTC
Last updated
2026-06-27 09:08 UTC
Primary CWE
CWE-266
CWE-266: Incorrect Privilege Assignment
Vendor / Product
FreeBSD / FreeBSD
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
FreeBSD FreeBSD — 15.0-RELEASE < p10, 14.4-RELEASE < p6, 14.3-RELEASE < p15
Weakness (CWE)
CWESourceDescription
CWE-266 cna CWE-266: Incorrect Privilege Assignment
References (1)
Back to overview