CVE-2026-45253HIGH 8.4EPSS p5.8%

CVE-2026-45253CVE-2026-45253

Description

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the ability to debug a process may trigger arbitrary code execution in the kernel, even if the target process has no special privileges. The missing validation allows an unprivileged local user to escalate privileges, potentially gaining full control of the affected system.

Scoring

CVSS 3.18.4 (HIGH)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.16% probability of exploitation · percentile 5.8% · 2026-06-19T12:03:05Z
Published2026-05-21
Last modified2026-05-21

Underlying weaknesses· 1

CWE-787

References

  1. https://security.freebsd.org/advisories/FreeBSD-SA-26:21.ptrace.asc

1

TypeTargetConfidenceTier
WeaknessOut-of-bounds Writecwe-7870%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Linux Kernel Improper Privilege Management Vulnerability
CVE
CVE-2025-25269
CVE
CVE-2025-8109
CVE
CVE-2026-0106
CVE
CVE-2026-25258
CVE
Linux Kernel Improper Authentication Vulnerability
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.