type=SYSCALL msg=audit(1792421666.267:12284): arch=c000003e syscall=59 success=yes exit=0 a0=55f5ceb801a0 a1=55f5cec616f0 a2=55f5cec61900 a3=41 items=2 ppid=3786 pid=3945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="poc" exe="/home/localuser/CVE-2026-74580-main/poc" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421666.952:12306): arch=c000003e syscall=59 success=yes exit=0 a0=7e981b5db799 a1=7ffd16814a20 a2=7ffd168151d8 a3=8 items=2 ppid=3945 pid=3953 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="sh" exe="/usr/bin/dash" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421666.953:12309): arch=c000003e syscall=59 success=yes exit=0 a0=5a328cb99e18 a1=5a327aa4e648 a2=5a328cb99c58 a3=210 items=2 ppid=3953 pid=3954 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="gcc" exe="/usr/bin/x86_64-linux-gnu-gcc-15" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421666.957:12310): arch=c000003e syscall=59 success=yes exit=0 a0=1924e850 a1=1924e918 a2=1924c960 a3=8 items=2 ppid=3954 pid=3955 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="cc1" exe="/usr/libexec/gcc/x86_64-linux-gnu/15/cc1" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421667.000:12313): arch=c000003e syscall=59 success=yes exit=0 a0=1924a1f0 a1=1924e918 a2=1924c960 a3=8 items=2 ppid=3954 pid=3956 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="x86_64-linux-gn" exe="/usr/bin/x86_64-linux-gnu-as" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421667.007:12314): arch=c000003e syscall=59 success=yes exit=0 a0=192573e0 a1=19256fe8 a2=1924c960 a3=8 items=2 ppid=3954 pid=3957 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="collect2" exe="/usr/libexec/gcc/x86_64-linux-gnu/15/collect2" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421667.011:12315): arch=c000003e syscall=59 success=yes exit=0 a0=35dddf90 a1=35ddc300 a2=7fffacfb9a30 a3=8 items=2 ppid=3957 pid=3958 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="ld" exe="/usr/bin/x86_64-linux-gnu-ld.bfd" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421667.036:12322): arch=c000003e syscall=41 success=no exit=-97 a0=29 a1=3 a2=0 a3=8 items=0 ppid=3786 pid=3945 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="poc" exe="/home/localuser/CVE-2026-74580-main/poc" subj=unconfined key="sock_raw_eafnosupport"
type=SYSCALL msg=audit(1792421668.011:12332): arch=c000003e syscall=59 success=yes exit=0 a0=5eed0202e1be a1=7ffd16814e10 a2=7ffd168151d8 a3=0 items=2 ppid=3786 pid=3945 auid=1000 uid=1000 gid=1000 euid=0 suid=0 fsuid=0 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="sh" exe="/tmp/sh" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421674.719:12368): arch=c000003e syscall=59 success=yes exit=0 a0=610a14073328 a1=6109d6a53530 a2=610a14073168 a3=310 items=2 ppid=3945 pid=3964 auid=1000 uid=1000 gid=1000 euid=0 suid=0 fsuid=0 egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=2 comm="whoami" exe="/usr/lib/cargo/bin/coreutils/whoami" subj=unconfined key="process_creation"
type=SYSCALL msg=audit(1792421690.069:12484): arch=c000003e syscall=59 success=yes exit=0 a0=7ee0667f9840 a1=7ee050065640 a2=7ee0500a6260 a3=8 items=3 ppid=3726 pid=3972 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="which" exe="/usr/bin/dash" subj=snap.powershell.powershell key="process_creation"
type=SYSCALL msg=audit(1792421690.078:12489): arch=c000003e syscall=59 success=yes exit=0 a0=7ee0667f97d0 a1=7ee050065810 a2=7ee0500a6240 a3=8 items=3 ppid=3726 pid=3973 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="which" exe="/usr/bin/dash" subj=snap.powershell.powershell key="process_creation"
type=SYSCALL msg=audit(1792421690.088:12494): arch=c000003e syscall=59 success=yes exit=0 a0=7ee0667f97d0 a1=7ee05009f590 a2=7ee0500a6240 a3=8 items=2 ppid=3726 pid=3974 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="killall" exe="/usr/bin/killall" subj=snap.powershell.powershell key="process_creation"