Bug 2525889 (CVE-2026-82474) - CVE-2026-82474 sudo: Sudo: Policy bypass allows unauthorized program execution via execveat
Summary: CVE-2026-82474 sudo: Sudo: Policy bypass allows unauthorized program executio...
Keywords:
Status: NEW
Alias: CVE-2026-82474
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2529400
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-29 16:41 UTC by OSIDB Bzimport
Modified: 2026-09-24 06:23 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:68692 0 None None None 2026-09-17 17:36:02 UTC
Red Hat Product Errata RHSA-2026:69123 0 None None None 2026-09-21 13:33:23 UTC
Red Hat Product Errata RHSA-2026:71354 0 None None None 2026-09-24 06:23:29 UTC

Description OSIDB Bzimport 2026-08-29 16:41:17 UTC 
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
Comment 2 Jon Orris 2026-09-17 17:36:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:68692 https://access.redhat.com/errata/RHSA-2026:68692
Comment 3 Jon Orris 2026-09-21 13:33:22 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:69123 https://access.redhat.com/errata/RHSA-2026:69123
Comment 4 Jon Orris 2026-09-24 06:23:28 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:71354 https://access.redhat.com/errata/RHSA-2026:71354
Note You need to log in before you can comment on or make changes to this bug.