Skip to content
OpenAdvisories
High ELSA-2026-69123 1 CVE

Important: sudo security update (Oracle Linux 9)

Published Sep 21, 2026 · Updated Sep 21, 2026

Ecosystem: Oracle Linux

Summary

[1.9.17p2-3.1]
- CVE-2026-82474 sudo: execveat(2) intercept/log_subcmds bypass
Resolves: RHEL-255647

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 sudo 0:1.9.17p2-3.el9_8.1
Oracle Linux · 9 sudo-python-plugin 0:1.9.17p2-3.el9_8.1

Vulnerabilities 1

  • High 7.8
    CVE-2026-82474 Public exploit

    Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

    Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enf…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux