EIP-2026-102797

This exploit leverages a race condition in Calibre's mount helper to achieve local privilege escalation by manipulating mount points and symlinks to overwrite /etc/pam.d/common-auth, allowing passwordless root access.