TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-32282 · Microsoft / collected KEV context

EUVD-2026-20012

GO-2026-4864

BIT-golang-2026-32282

cve-program · CVE-2026-32282

• https://go.dev/cl/763761
• https://go.dev/issue/78293
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://pkg.go.dev/vuln/GO-2026-4864

euvd · EUVD-2026-20012

• https://go.dev/cl/763761
• https://go.dev/issue/78293
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://pkg.go.dev/vuln/GO-2026-4864

nvd · CVE-2026-32282

• https://go.dev/cl/763761
• https://go.dev/issue/78293
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://pkg.go.dev/vuln/GO-2026-4864

osv · GO-2026-4864

• https://go.dev/cl/763761
• https://go.dev/issue/78293
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU

• On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignor… · Advisory content revised · 9 Nov 2026
• On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignor… · Advisory content revised · 7 Nov 2026
• On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignor… · Advisory content revised · 1 Nov 2026
• Release 2026-05-29 · Tool release · 4 Jun 2026