CVE-2026-59676: Deferred Setxattr Toctoucve-2026-59676-deferred-setxattr-toctou
Applying `setxattr` on string paths inside a loop (often part of directory traversal or deferred attribute application) introduces a Time-of-Check to Time-of-Use (TOCTOU) race condition. If an attacker replaces a traversed directory with a symlink before the attribute application, `setxattr` will follow the symlink, allowing modifications on unintended arbit
