📋 الوصف الكامل

CVE-2026-8933 — snap-confine mount-namespace race → local root shell Working PoC. Full local privilege escalation reproduced end-to-end, from an unprivileged user uid 1000 to a real uid-0 root shell — no password, no interaction, no pre-existing privileges. An unprivileged process makes the set-capabilities snap-confine write a root-owned udev rule into the host's /run/udev/rules.d/; systemd