A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade abrt-addon-xorgUpgrade python3-abrt-addonUpgrade abrt-console-notificationUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade abrt-desktopUpgrade abrt-addon-vmcoreUpgrade abrt-plugin-sosreportUpgrade abrt-cli-ngUpgrade abrt-tuiUpgrade abrt-dbusUpgrade abrt-gui-libsUpgrade abrt-plugin-machine-idUpgrade abrt-guiUpgrade python3-abrtUpgrade abrtUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-container-addonUpgrade python3-abrt-docUpgrade abrt-addon-kerneloopsUpgrade abrt-cli | Dec 11, 2025 | Dec 4, 2025 |
| Oracle_linux | — | Upgrade python3-abrt-addonUpgrade abrt-libsUpgrade abrt-addon-pstoreoopsUpgrade abrt-cli-ngUpgrade abrt-cliUpgrade abrt-desktopUpgrade abrtUpgrade abrt-addon-ccppUpgrade abrt-addon-kerneloopsUpgrade python3-abrt-container-addonUpgrade abrt-tuiUpgrade abrt-addon-coredump-helperUpgrade python3-abrtUpgrade abrt-gui-libsUpgrade abrt-addon-vmcoreUpgrade abrt-plugin-sosreportUpgrade python3-abrt-docUpgrade abrt-console-notificationUpgrade abrt-dbusUpgrade abrt-guiUpgrade abrt-addon-xorgUpgrade abrt-plugin-machine-id | Dec 8, 2025 | Dec 3, 2025 |
| Redhat_linux | — | Upgrade abrt-console-notificationUpgrade abrt-gui-debuginfoUpgrade abrt-debugsourceUpgrade abrt-dbus-debuginfoUpgrade abrt-retrace-client-debuginfoUpgrade abrt-addon-coredump-helperUpgrade abrt-tuiUpgrade abrt-libs-debuginfoUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrt-addon-vmcoreUpgrade abrt-addon-xorgUpgrade abrt-gui-libs-debuginfoUpgrade abrt-plugin-sosreportUpgrade abrt-atomic-debuginfoNo solution existsUpgrade python3-abrtUpgrade abrt-dbusUpgrade abrt-desktopUpgrade abrt-tui-debuginfoUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-gui-libsUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-plugin-machine-idUpgrade abrt-debuginfoUpgrade abrt-libsUpgrade abrt-addon-ccppUpgrade abrt-cliUpgrade python3-abrt-docUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-upload-watch-debuginfoUpgrade python3-abrt-addonUpgrade abrt-guiUpgrade abrtUpgrade python3-abrt-container-addonUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-cli-ng | Dec 5, 2025 | Dec 3, 2025 |
| Rocky_linux | — | Upgrade python3-abrtUpgrade python3-abrt-debuginfoUpgrade abrt-console-notificationUpgrade abrt-gui-libsUpgrade abrt-addon-coredump-helperUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-vmcoreUpgrade python3-abrt-container-addonUpgrade abrt-guiUpgrade abrt-cliUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-debugsourceUpgrade abrtUpgrade abrt-plugin-machine-idUpgrade abrt-addon-xorgUpgrade abrt-dbusUpgrade python3-abrt-addonUpgrade abrt-plugin-sosreportUpgrade abrt-libsUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-tuiUpgrade abrt-debuginfoUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-tui-debuginfoUpgrade abrt-libs-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-cli-ngUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-desktopUpgrade abrt-dbus-debuginfoUpgrade abrt-addon-pstoreoopsUpgrade abrt-gui-libs-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-addon-ccpp | May 25, 2026 | May 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub