THREAT OPS › Threat News › [NVD] CVE-2026-80929 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved:
sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
cad_pid is global, and kill_cad_pid() is only used in the root namespace.
However, due to pid_table_root_permissions(), a non-root user
[NVD] CVE-2026-80929 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] cad_pid is global, and kill_cad_pid() is only used in the root namespace. However, due to pid_table_root_permissions(), a non-root user
CVE-2026-80929 CVSS: 7.8 HIGH Published: 2026-09-11T20:18:56.647
In the Linux kernel, the following vulnerability has been resolved:
sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
cad_pid is global, and kill_cad_pid() is only used in the root namespace.
However, due to pid_table_root_permissions(), a non-root user can unshare pid/user namespaces and modify it from the
Indicators of compromise
- CVE-2026-80929cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80929