setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-nodemon | Apr 11, 2024 | Mar 19, 2024 |
| Amazon_linux_2023 | — | Upgrade nodejs20Upgrade nodejs20-debugsourceUpgrade nodejs20-full-i18nUpgrade nodejs20-libsUpgrade nodejs20-develUpgrade nodejs20-debuginfoUpgrade v8-11.3-develUpgrade nodejs20-npmUpgrade nodejs20-docsUpgrade nodejs20-libs-debuginfo | Feb 17, 2025 | Feb 19, 2024 |
| Freebsd | — | Upgrade node18Upgrade electron29Upgrade node16Upgrade node21Upgrade node20Upgrade node | May 18, 2024 | May 17, 2024 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 15, 2025 | Mar 19, 2024 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade npmUpgrade nodejsUpgrade nodejs-packaging-bundler | Apr 9, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-packaging-bundlerUpgrade nodejs-packaging | Apr 9, 2024 | Mar 19, 2024 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-devel | May 8, 2024 | Mar 19, 2024 |
| Suse | — | Upgrade npm20Upgrade nodejs20-develUpgrade corepack20Upgrade nodejs20-docsUpgrade nodejs20 | Feb 29, 2024 | Feb 28, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub