CVE-2026-104617sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

Açıklama

There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104617
• https://www.suse.com/security/cve/CVE-2026-104617.html