SUID needs to go
SUID needs to go
Posted Apr 30, 2026 8:58 UTC (Thu) by chris_se (subscriber, #99706)In reply to: SUID needs to go by bluca
Parent article: A security bug in AEAD sockets
It's not just SUID though, from reading through the exploit - you could also replace the cached page of /etc/passwd or /etc/shadow, for example - the SUID variant was just the easiest possible way to exploit this.