EIP-2026-102898

This is a technical analysis of a Linux ptrace vulnerability in 2.2.x kernels where non-readable non-setuid executables can be traced as child processes, leading to information disclosure. The writeup demonstrates the vulnerability by comparing PT_ATTACH behavior with child process tracing.