A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade abrt-plugin-machine-idUpgrade abrt-cliUpgrade abrt-dbusUpgrade abrtUpgrade abrt-gui-libsUpgrade abrt-guiUpgrade python3-abrt-docUpgrade abrt-addon-coredump-helperUpgrade abrt-addon-kerneloopsUpgrade python3-abrtUpgrade python3-abrt-container-addonUpgrade abrt-console-notificationUpgrade abrt-cli-ngUpgrade abrt-tuiUpgrade abrt-addon-vmcoreUpgrade abrt-plugin-sosreportUpgrade abrt-addon-xorgUpgrade python3-abrt-addonUpgrade abrt-addon-ccppUpgrade abrt-desktopUpgrade abrt-libsUpgrade abrt-addon-pstoreoops | Dec 11, 2025 | Dec 4, 2025 |
| Oracle_linux | — | Upgrade abrt-guiUpgrade abrt-addon-xorgUpgrade abrt-console-notificationUpgrade abrt-tuiUpgrade abrt-plugin-sosreportUpgrade python3-abrt-docUpgrade abrt-plugin-machine-idUpgrade abrt-addon-coredump-helperUpgrade abrt-dbusUpgrade python3-abrtUpgrade abrt-gui-libsUpgrade abrt-addon-vmcoreUpgrade abrt-addon-ccppUpgrade abrt-addon-kerneloopsUpgrade abrt-desktopUpgrade abrt-cliUpgrade python3-abrt-addonUpgrade python3-abrt-container-addonUpgrade abrtUpgrade abrt-addon-pstoreoopsUpgrade abrt-libsUpgrade abrt-cli-ng | Dec 8, 2025 | Dec 3, 2025 |
| Redhat_linux | — | Upgrade python3-abrtUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-dbus-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-retrace-client-debuginfoUpgrade abrt-plugin-sosreportUpgrade abrt-console-notificationUpgrade abrt-addon-vmcoreUpgrade abrt-addon-coredump-helperUpgrade abrt-libs-debuginfoUpgrade abrt-atomic-debuginfoUpgrade abrt-tuiNo solution existsUpgrade abrt-debugsourceUpgrade abrt-gui-debuginfoUpgrade abrt-addon-xorgUpgrade abrt-gui-libs-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrtUpgrade abrt-addon-pstoreoopsUpgrade python3-abrt-addonUpgrade abrt-guiUpgrade abrt-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-desktopUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-libsUpgrade abrt-gui-libsUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-cli-ngUpgrade abrt-addon-upload-watch-debuginfoUpgrade python3-abrt-docUpgrade abrt-cliUpgrade abrt-addon-ccppUpgrade abrt-dbusUpgrade abrt-tui-debuginfoUpgrade python3-abrt-container-addonUpgrade abrt-plugin-machine-idUpgrade abrt-addon-kerneloops | Dec 5, 2025 | Dec 3, 2025 |
| Rocky_linux | — | Upgrade abrt-addon-vmcoreUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-cliUpgrade abrt-debugsourceUpgrade python3-abrt-debuginfoUpgrade abrt-gui-libsUpgrade abrt-addon-kerneloopsUpgrade abrtUpgrade abrt-plugin-machine-idUpgrade abrt-guiUpgrade abrt-addon-coredump-helperUpgrade abrt-console-notificationUpgrade python3-abrt-container-addonUpgrade python3-abrtUpgrade abrt-tui-debuginfoUpgrade abrt-libsUpgrade abrt-cli-ngUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-desktopUpgrade abrt-tuiUpgrade abrt-debuginfoUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-dbusUpgrade abrt-addon-xorgUpgrade abrt-plugin-sosreportUpgrade python3-abrt-addonUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-libs-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-gui-libs-debuginfoUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-ccppUpgrade abrt-dbus-debuginfo | May 25, 2026 | May 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub