A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade shadow | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade util-linux | May 3, 2017 | Feb 23, 2017 |
| Centos_linux | — | Upgrade coreutilsUpgrade coreutils-debuginfoUpgrade libblkidUpgrade libmount-develUpgrade coreutils-libsUpgrade libuuidUpgrade uuiddUpgrade util-linux-debuginfoUpgrade libblkid-develUpgrade libmountUpgrade libuuid-develUpgrade util-linux | Apr 13, 2017 | Feb 23, 2017 |
| Debian | — | Upgrade coreutilsUpgrade shadowUpgrade util-linux | Feb 25, 2017 | Feb 23, 2017 |
| Gentoo Linux | — | Upgrade sys-apps/shadow. | Oct 30, 2017 | Jun 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libuuidUpgrade libmountUpgrade util-linuxUpgrade libblkidUpgrade libblkid-develUpgrade libuuid-develUpgrade uuidd | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libuuid-develUpgrade libblkid-develUpgrade libmountUpgrade libblkidUpgrade libuuidUpgrade uuiddUpgrade util-linux | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade util-linuxUpgrade libuuid-develUpgrade libblkid-develUpgrade libmountUpgrade libmount-develUpgrade libuuidUpgrade uuiddUpgrade coreutils-libsUpgrade libblkidUpgrade coreutils | Mar 28, 2017 | Feb 22, 2017 |
| Redhat_linux | — | Upgrade util-linux-debuginfoUpgrade uuiddUpgrade util-linuxUpgrade libuuidUpgrade libblkid-develUpgrade coreutils-libsUpgrade coreutilsUpgrade libmount-develUpgrade libmountUpgrade libuuid-develNo solution existsUpgrade libblkidUpgrade coreutils-debuginfo | Mar 23, 2017 | Feb 23, 2017 |
| Suse | — | Upgrade util-linuxUpgrade libuuid1-32bitUpgrade libfdisk1Upgrade libmount-develUpgrade libblkid-develUpgrade libmount1-32bitUpgrade libfdisk-develUpgrade libblkid1-32bitUpgrade uuiddUpgrade coreutils-x86Upgrade libsmartcols-develUpgrade libuuid1Upgrade python-libmountUpgrade coreutils-langUpgrade util-linux-langUpgrade libsmartcols1Upgrade sles12sp2-docker-imageUpgrade libblkid1Upgrade libuuid-devel-staticUpgrade sles12-docker-imageUpgrade libblkid-devel-staticUpgrade coreutilsUpgrade libmount1Upgrade util-linux-systemdUpgrade sles12sp1-docker-imageUpgrade libuuid-devel | Feb 24, 2017 | Feb 23, 2017 |
| Ubuntu | — | Upgrade loginUpgrade uidmapUpgrade passwd | May 5, 2017 | Feb 23, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub