Nixpkgs security tracker

Permalink CVE-2026-82474

8.5 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 3 hours ago Activity log

Created suggestion 3 hours ago

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

References

Patch Commit patch
https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c technical-description
https://github.com/sudo-project/sudo product
VulnCheck Advisory: Sudo through 1.9.17p2 Intercept Policy Bypass via execveat third-party-advisory

Affected products

sudo

=<1.9.17p2

Matching in nixpkgs

pkgs.sudo

Command to run commands as root

nixos-unstable 1.9.17p2
- nixpkgs-unstable 1.9.17p2
- nixos-unstable-small 1.9.17p2
nixos-26.05 1.9.17p2
- nixos-26.05-small 1.9.17p2
- nixpkgs-26.05-darwin 1.9.17p2

pkgs.qsudo

Graphical sudo utility from Project Trident

nixos-unstable 2020.03.27
- nixpkgs-unstable 2020.03.27
- nixos-unstable-small 2020.03.27
nixos-26.05 2020.03.27
- nixos-26.05-small 2020.03.27
- nixpkgs-26.05-darwin 2020.03.27

pkgs.sudo-rs

Memory safe implementation of sudo and su

nixos-unstable 0.2.13
- nixpkgs-unstable 0.2.14
- nixos-unstable-small 0.2.14
nixos-26.05 0.2.14
- nixos-26.05-small 0.2.14
- nixpkgs-26.05-darwin 0.2.14

pkgs.psudohash

Password list generator for orchestrating brute force attacks and cracking hashes

nixos-unstable 1.1.0
- nixpkgs-unstable 1.1.0
- nixos-unstable-small 1.1.0
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.sudo-font

Font for programmers and command line users

nixos-unstable 3.6
- nixpkgs-unstable 3.6
- nixos-unstable-small 3.6
nixos-26.05 3.4
- nixos-26.05-small 3.4
- nixpkgs-26.05-darwin 3.4

pkgs.gnome-sudoku

Test your logic skills in this number grid puzzle

nixos-unstable 50.1
- nixpkgs-unstable 50.2.1
- nixos-unstable-small 50.2.1
nixos-26.05 50.2.1
- nixos-26.05-small 50.2.1
- nixpkgs-26.05-darwin 50.2.1

pkgs.doas-sudo-shim

Shim for the sudo command that utilizes doas

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.2.0
nixos-26.05 0.1.2
- nixos-26.05-small 0.1.2
- nixpkgs-26.05-darwin 0.1.2

pkgs.lxqt.lxqt-sudo

GUI frontend for sudo/su

nixos-unstable 2.4.0
- nixpkgs-unstable 2.4.0
- nixos-unstable-small 2.4.0
nixos-26.05 2.4.0
- nixos-26.05-small 2.4.0
- nixpkgs-26.05-darwin 2.4.0

pkgs.run0-sudo-shim

Shim for the sudo command that utilizes run0

nixos-unstable 1.3.1
- nixpkgs-unstable 1.4.2
- nixos-unstable-small 1.4.2
nixos-26.05 1.4.2
- nixos-26.05-small 1.4.2
- nixpkgs-26.05-darwin 1.4.2

pkgs.yaziPlugins.sudo

Call `sudo` in yazi

nixos-unstable 0-unstable-2026-05-07
- nixpkgs-unstable 0-unstable-2026-05-07
- nixos-unstable-small 0-unstable-2026-08-26
nixos-26.05 0-unstable-2026-05-07
- nixos-26.05-small 0-unstable-2026-05-07
- nixpkgs-26.05-darwin 0-unstable-2026-05-07

pkgs.kdePackages.ksudoku

KSudoku is a logic-based symbol placement puzzle

nixos-unstable 26.04.2
- nixpkgs-unstable 26.04.3
- nixos-unstable-small 26.08.0
nixos-26.05 26.04.3
- nixos-26.05-small 26.04.3
- nixpkgs-26.05-darwin 26.04.3

pkgs.fishPlugins.plugin-sudope

Fish plugin to quickly put 'sudo' in your command

nixos-unstable 0-unstable-2025-09-16
- nixpkgs-unstable 0-unstable-2025-09-16
- nixos-unstable-small 0-unstable-2025-09-16
nixos-26.05 0-unstable-2025-09-16
- nixos-26.05-small 0-unstable-2025-09-16
- nixpkgs-26.05-darwin 0-unstable-2025-09-16

Package maintainers

@dani0854 Danil Suetin <suetin085+nixpkgs@protonmail.com>
@Anomalocaridid Duncan Russell <duncan@anomalocaris.xyz>
@bobby285271 Bobby Rong <rjl931189261@126.com>
@nekowinston winston <hey@winston.sh>
@theCapypara Marco Köpcke <hello@capypara.de>
@thunze Tom Hunze
@jtojnar Jan Tojnar <jtojnar@gmail.com>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@FRidh Frederik Rietdijk <fridh@fridh.nl>
@mjm Matt Moriarity <matt@mattmoriarity.com>
@NickCao Nick Cao <nickcao@nichi.co>
@K900 Ilya K. <me@0upti.me>
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
@peterhoeg Peter Hoeg <peter@hoeg.com>
@bkchr Bastian Köcher <nixos@kchr.de>
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
@nyanloutre Paul Trehiou <paul@nyanlout.re>
@romildo José Romildo Malaquias <malaquias@gmail.com>
@exploitoverload Asier Armenteros <nix@exploitoverload.com>
@zimward zimward <zimward@zimward.moe>
@kuflierl Kennet Flierl <kuflierl@gmail.com>
@LordGrimmauld Sören Bender <soeren@benjos.de>
@rhendric Ryan Hendrickson
@pancaek paneku
@R-VdP Ramses <ramses@well-founded.dev>
@nicoonoclaste nicoo <nicoo@debian.org>
@adamcstephens Adam C. Stephens <happy.plan4249@valkor.net>
@khaneliman Austin Horstman <khaneliman12@gmail.com>

Suggestions search