CVE-2025-62596: Rust Procfs Myself Toctou Mount Racecve-2025-62596-rust-procfs-myself-toctou-mount-race
`Process::myself()` from the `procfs` crate performs component-by-component path resolution of `/proc/self` without anchoring to a pre-opened directory file descriptor. In environments with shared mount namespaces (container runtimes, sandbox code), an attacker can race the traversal by bind-mounting over an intermediate path component between a validation c
