Missing system calls in the Linux kernel audit subsystem classes (CVE-2025-71239, CVE-2026-23241)

Introduction The Linux kernel audit subsystem is a security mechanism allowing one to detect potential threats on a Linux system. Its userland counterpart, auditd (the audit daemon), can be configured with different kind of rules. Part of these rules rely on hooking system calls in kernel land grouped by what are called classes. Some, relatively recent, system calls were missing from these…