CVE-2026-49414 – ASLR bypass for setuid executables via procctl(2)

CVE ID :CVE-2026-49414

Published : June 27, 2026, 9:22 a.m. | 2 hours, 23 minutes ago

Description :The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen.

An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2). This makes exploitation of any separate memory corruption vulnerability in that binary significantly easier.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…