> CVE-2026-45253

« BACK_TO_HOME
PUBLISHED
2026-05-21 10:16
MODIFIED
2026-05-21 10:16
EPSS (Prob. Exploit)
0.18%
Top 92.6%
DATA SOURCES:
NVD 🔗 2026-05-21 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the ability to debug a process may trigger arbitrary code execution in the kernel, even if the target process has no special privileges. The missing validation allows an unprivileged local user to escalate privileges, potentially gaining full control of the affected system.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-787

> CWE DETAILED DESCRIPTIONS

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

> HISTORIQUE DES MODIFICATIONS

Première apparition
21/05/2026 10:16
Source: NVD
📊 ENRICHISSEMENT 01/06/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.
Total des modifications: 1 Dernière mise à jour: 5 months ago

> REFERENCES

https://security.freebsd.org/advisories/FreeBSD-SA-26:21.ptrace.asc
« BACK_TO_HOME