CVE-2026-80929

CVE CVE-2026-80929EUVD EUVD-2026-76252Published 2026-09-11T19:42:04.000ZLast changed 2026-09-13T06:28:10.000ZCVSS 7.8

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] cad_pid is global, and kill_cad_pid() is only used in the root namespace. However, due to pid_table_root_permissions(), a non-root user can unshare pid/user namespaces and modify it from the child namespace. This makes no sense and is simply wrong. Move it to kern_reboot_table[] where it logically belongs; this ensures that only GLOBAL_ROOT_UID can read/modify this sysctl. Note that this patch doesn't preserve "#ifdef CONFIG_PROC_SYSCTL" around the "cad_pid"; CONFIG_PROC_SYSCTL selects CONFIG_SYSCTL, so it is always set when kern_reboot_table[] is compiled.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux e054bcbe7e7af2baad3752f1a4916a7fffc0457e <7170ca01623b399c97f2ae9d3e228badc1f25ea3; patch: 6.18.50; patch: 7.2.4; patch: 7.3-rc1; patch: 0; e054bcbe7e7af2baad3752f1a4916a7fffc0457e <a09bc4eaa67e1a72df3b6d0beb3afeef1e1fdfcd; e054bcbe7e7af2baad3752f1a4916a7fffc0457e <e8527de7fea191fda704792a56081f9009aeec37; 6.17

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.