I found that in qemu user space on linux (qemu-i386), if you execute an executable that contains an "execve" this is execute into qemu-i386 replacing it. 
See "linux-user/syscall.c" around line 4360. How it is possible to fix this bug?

Antonio