CVE-2026-82474
Fixed in a distro release EPSS <1%CVSS 7.8
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
Products: Sudo project Sudo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | sudo | 1.9.17-10.p2.el10_2.6 |
| AlmaLinux 10 | sudo-python-plugin | 1.9.17-10.p2.el10_2.6 |
| AlmaLinux 9 | sudo | 1.9.17p2-3.el9_8.1 |
| AlmaLinux 9 | sudo-python-plugin | 1.9.17p2-3.el9_8.1 |
| Debian 12 | sudo | no fix |
| Debian 13 | sudo | no fix |
| Debian 14 | sudo | no fix |
| Red Hat Enterprise Linux 10.2 | sudo | 0:1.9.17-10.p2.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | sudo-debuginfo | 0:1.9.17-10.p2.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | sudo-debugsource | 0:1.9.17-10.p2.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | sudo-python-plugin | 0:1.9.17-10.p2.el10_2.6 |
| Red Hat Enterprise Linux 10.2 | sudo-python-plugin-debuginfo | 0:1.9.17-10.p2.el10_2.6 |
| Red Hat Enterprise Linux 9 | sudo | 0:1.9.17p2-3.el9_8.1 |
| Red Hat Enterprise Linux 9 | sudo-debuginfo | 0:1.9.17p2-3.el9_8.1 |
| Red Hat Enterprise Linux 9 | sudo-debugsource | 0:1.9.17p2-3.el9_8.1 |
| Red Hat Enterprise Linux 9 | sudo-python-plugin | 0:1.9.17p2-3.el9_8.1 |
| Red Hat Enterprise Linux 9 | sudo-python-plugin-debuginfo | 0:1.9.17p2-3.el9_8.1 |
| Red Hat Enterprise Linux eus 10.0 | sudo | 0:1.9.15-8.p5.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | sudo-debuginfo | 0:1.9.15-8.p5.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | sudo-debugsource | 0:1.9.15-8.p5.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | sudo-python-plugin | 0:1.9.15-8.p5.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | sudo-python-plugin-debuginfo | 0:1.9.15-8.p5.el10_0.4 |
| Red Hat hummingbird 1 | sudo | 0:1.9.17-16.p2.1.hum1 |
| Red Hat hummingbird 1 | sudo-devel | 0:1.9.17-16.p2.1.hum1 |
| Red Hat hummingbird 1 | sudo-logsrvd | 0:1.9.17-16.p2.1.hum1 |
| Red Hat hummingbird 1 | sudo-python-plugin | 0:1.9.17-16.p2.1.hum1 |
| Rocky Linux 10 | sudo | 0:1.9.17-10.p2.el10_2.6 |
| Rocky Linux 9 | sudo | 0:1.9.17p2-3.el9_8.1 |
| Ubuntu 24.04 LTS | sudo | 1.9.15p5-3ubuntu5.24.04.3 |
| Ubuntu 26.04 LTS | sudo | 1.9.17p2-1ubuntu3.1 |