EIP-2026-102796

This exploit leverages a race condition in the calibre-mount-helper to mount a crafted overlay filesystem over /etc/pam.d, modifying PAM configuration files to bypass authentication. It uses a combination of symlink manipulation and inotify to achieve privilege escalation.