Beveiligingsadvies

CVE-2026-49414

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-27 09:22:23

Laatst bijgewerkt 2026-06-29 13:04:45

Toegewezen door freebsd

CVSS-score 7.8

Status PUBLISHED

Beschrijving

The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2). This makes exploitation of any separate memory corruption vulnerability in that binary significantly easier.

← Alle CVE's bekijken Bekijk op cve.org ↗