Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudo-python-pluginUpgrade sudo | Oct 11, 2026 | Sep 21, 2026 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Oct 22, 2026 | Aug 29, 2026 |
| Redhat_linux | — | Upgrade sudoUpgrade sudo-python-pluginUpgrade sudo-debuginfoUpgrade sudo-debugsourceUpgrade sudo-python-plugin-debuginfo | Sep 9, 2026 | Aug 29, 2026 |
| Rocky_linux | — | Upgrade sudo-python-plugin-debuginfoUpgrade sudoUpgrade sudo-debugsourceUpgrade sudo-python-pluginUpgrade sudo-debuginfo | Sep 23, 2026 | Sep 19, 2026 |
| Ubuntu | — | Upgrade sudoUpgrade sudo-ldap | Sep 23, 2026 | Sep 22, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub