A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade shadow | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade util-linux | May 3, 2017 | Feb 23, 2017 |
| Centos_linux | — | Upgrade libblkid-develUpgrade libuuid-develUpgrade libmountUpgrade util-linuxUpgrade util-linux-debuginfoUpgrade coreutils-debuginfoUpgrade coreutils-libsUpgrade uuiddUpgrade coreutilsUpgrade libuuidUpgrade libblkidUpgrade libmount-devel | Apr 13, 2017 | Feb 23, 2017 |
| Debian | — | Upgrade coreutilsUpgrade util-linuxUpgrade shadow | Feb 25, 2017 | Feb 23, 2017 |
| Gentoo Linux | — | Upgrade sys-apps/shadow. | Oct 30, 2017 | Jun 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libuuid-develUpgrade libblkidUpgrade libblkid-develUpgrade uuiddUpgrade libmountUpgrade libuuidUpgrade util-linux | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libblkid-develUpgrade libuuid-develUpgrade libmountUpgrade uuiddUpgrade util-linuxUpgrade libblkidUpgrade libuuid | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade libmount-develUpgrade libblkid-develUpgrade libuuid-develUpgrade util-linuxUpgrade uuiddUpgrade libmountUpgrade libuuidUpgrade coreutils-libsUpgrade coreutilsUpgrade libblkid | Mar 28, 2017 | Feb 22, 2017 |
| Redhat_linux | — | Upgrade util-linuxUpgrade coreutilsUpgrade util-linux-debuginfoUpgrade libmount-develUpgrade coreutils-libsUpgrade uuiddUpgrade libuuidUpgrade libblkid-develUpgrade libmountNo solution existsUpgrade libuuid-develUpgrade coreutils-debuginfoUpgrade libblkid | Mar 23, 2017 | Feb 23, 2017 |
| Suse | — | Upgrade libblkid1-32bitUpgrade libsmartcols-develUpgrade libfdisk1Upgrade util-linuxUpgrade libuuid1-32bitUpgrade libfdisk-develUpgrade uuiddUpgrade coreutils-x86Upgrade libmount1-32bitUpgrade libuuid1Upgrade libblkid-develUpgrade libmount-develUpgrade libuuid-develUpgrade sles12sp2-docker-imageUpgrade sles12sp1-docker-imageUpgrade coreutilsUpgrade libsmartcols1Upgrade python-libmountUpgrade libblkid1Upgrade util-linux-langUpgrade libmount1Upgrade libblkid-devel-staticUpgrade util-linux-systemdUpgrade libuuid-devel-staticUpgrade sles12-docker-imageUpgrade coreutils-lang | Feb 24, 2017 | Feb 23, 2017 |
| Ubuntu | — | Upgrade loginUpgrade uidmapUpgrade passwd | May 5, 2017 | Feb 23, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub