Ubuntu Security Notice 4001-1 - Jann Horn discovered that libseccomp did not correctly generate 64-bit syscall argument comparisons with arithmetic operators. An attacker could use this to bypass intended access restrictions for argument-filtered system calls.
23b5565883c626d654d99f5b47bd16b675b6316293fe57bab66ec2f2bf383ccf