A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade shadow | Jul 27, 2018 | Jul 27, 2018 |
| Amazon_linux | — | Upgrade util-linux | May 3, 2017 | Feb 23, 2017 |
| Centos_linux | — | Upgrade libmountUpgrade libuuid-develUpgrade libblkid-develUpgrade util-linux-debuginfoUpgrade util-linuxUpgrade coreutils-libsUpgrade libmount-develUpgrade coreutilsUpgrade libblkidUpgrade uuiddUpgrade coreutils-debuginfoUpgrade libuuid | Apr 13, 2017 | Feb 23, 2017 |
| Debian | — | Upgrade util-linuxUpgrade shadowUpgrade coreutils | Feb 25, 2017 | Feb 23, 2017 |
| Gentoo Linux | — | Upgrade sys-apps/shadow. | Oct 30, 2017 | Jun 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libblkid-develUpgrade libuuid-develUpgrade libblkidUpgrade uuiddUpgrade util-linuxUpgrade libmountUpgrade libuuid | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libuuid-develUpgrade libblkid-develUpgrade libuuidUpgrade libblkidUpgrade util-linuxUpgrade libmountUpgrade uuidd | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade coreutilsUpgrade libblkidUpgrade libblkid-develUpgrade uuiddUpgrade util-linuxUpgrade libuuid-develUpgrade libmount-develUpgrade libmountUpgrade coreutils-libsUpgrade libuuid | Mar 28, 2017 | Feb 22, 2017 |
| Redhat_linux | — | Upgrade libuuid-develNo solution existsUpgrade coreutils-debuginfoUpgrade libmountUpgrade libblkidUpgrade coreutilsUpgrade libblkid-develUpgrade util-linuxUpgrade uuiddUpgrade libuuidUpgrade libmount-develUpgrade coreutils-libsUpgrade util-linux-debuginfo | Mar 23, 2017 | Feb 23, 2017 |
| Suse | — | Upgrade python-libmountUpgrade libsmartcols1Upgrade util-linux-langUpgrade coreutilsUpgrade libmount1Upgrade libuuid-develUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade sles12-docker-imageUpgrade sles12sp2-docker-imageUpgrade util-linux-systemdUpgrade libuuid-devel-staticUpgrade sles12sp1-docker-imageUpgrade coreutils-langUpgrade libmount-develUpgrade util-linuxUpgrade libuuid1-32bitUpgrade libfdisk-develUpgrade libblkid1-32bitUpgrade libfdisk1Upgrade coreutils-x86Upgrade libsmartcols-develUpgrade libuuid1Upgrade libblkid-develUpgrade uuiddUpgrade libmount1-32bit | Feb 24, 2017 | Feb 23, 2017 |
| Ubuntu | — | Upgrade passwdUpgrade loginUpgrade uidmap | May 5, 2017 | Feb 23, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub