[LTP] cve: add pwnescape reproducer

[Petr Vorel]

Hi Andrea, all,

I'm verifying it at least on some of SLES versions.

FYI on 4.12 and 4.4 based SLES kernels with backported 6785011f8b16 (i.e. fixed
kernels) the test fails:
pwnescape.c:213: TBROK: control datagram was not forwarded back

=> obviously test is not working on older codestreams, that would be good to get
fixed. I try to have look on it, but I'm not sure if I manage it till the end of
the month.

Otherwise LGTM, thanks!

Reviewed-by: Petr Vorel <pvorel@suse.cz>

> > Hi Andrea,

> > On Tue, 20 Oct 2026, Andrea Cervesato wrote:
> > > cve: add pwnescape reproducer

> > > +	.tags = (const struct tst_tag[]) {
> > > +		{"linux-git", "6785011f8b16"},
> > > +		{}
> > > +	},

> > Add {"CVE", "2026-99999"} to .tags in testcases/cve/pwnescape.c.
> > Without it, metadata extraction assigns only the regression group, so
> > CVE-based metadata selection and the generated CVE catalog omit this test;
> > the runtest/cve entry does not populate that metadata.

> Valid, I will fix it before merge

Sure, I can add it before merge.


> > Runtime verification was blocked by unshare(CLONE_NEWUSER) returning
> > EPERM in this environment, before the forwarding behavior was exercised.

> This is the github LSM pushing out the reproducer. It's not a test bug

Sure.

Kind regards,
Petr