6 posts tagged with "Security Notice"

Summary​

A security vulnerability (CVE-2026-43284) found in the Linux kernel may allow a local unprivileged user to escalate privileges to root. To exploit this vulnerability, an attacker only needs:

• the ability to create user namespaces
• permission to execute at least one setuid binary (for example, sudo, passwd, or fusermount)

Any standard Linux user account with shell access typically meets these requirements.

Description​

A security vulnerability (CVE-2026-31431) has been found in the Linux kernel that could be exploited to allow privilege escalation to root by any authorized user of the system who can (1) create sockets, and (2) have read and execute permissions on at least one setuid binary (e.g. sudo, fusermount, passwd). Any user account with shell access will generally meet these criteria. The attack does not require the attacker to have knowledge of the unprivileged user's password to execute; simply having control of an unprivileged local user account that can create sockets and execute at least one setuid binary is sufficient.

We are pleased to announce the Torizon OS 7.3.0 quarterly release for Toradex's System on Modules.

A security vulnerability (CVE-2025-32463) has been found in sudo that could be exploited to allow privilege escalation to root by any authorized user of the system who can execute shell commands. The attack does not require the attacker to have knowledge of the unprivileged user's password to execute; simply the ability to run sudo at all is sufficient. All versions of sudo beginning with 1.9.14 are affected, and there is no workaround or mitigation possible. The issue is patched in sudo version 1.19.17p1, released on June 30, 2025.

A security flaw has been found in Fluent Bit's built-in HTTP server that could be exploited to potentially cause denial of service, information disclosure and, given enough time and effort, remote code execution. Affected Fluent Bit versions are 2.0.7 through 3.0.3.

A security flaw has been found in the xz project that, under certain conditions, can work as a backdoor for world-facing OpenSSH servers.