CVE-2026-49414
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile — higher than 1% of all known CVEs
Summary
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen.
Risk Assessment
An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2), making exploitation of any separate memory corruption vulnerability in that binary significantly easier.
Recommendation
Apply the vendor-supplied patch immediately to fix the order of clearing ASLR flags in the ELF image activator.
Original NVD description (English source)
The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2). This makes exploitation of any separate memory corruption vulnerability in that binary significantly easier.