The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass intended restrictions on setting the PTSUSPEND_SECCOMP flag.
{ "urgency": "not yet assigned" }