Summary
It was discovered that the util-linux su utility did not drop capabilities
when being used with the --pty option. While not a security issue by
itself, a local attacker could possibly use the su tool to exploit
vulnerabilities in other applications.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | util-linux | 2.37.2-4ubuntu3.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | util-linux | 2.39.3-9ubuntu6.5 |
| Ubuntu · 25.10 | util-linux | 2.41-4ubuntu4.2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | util-linux | 2.34-0.1ubuntu9.6+esm1 |
References
-
report
https://launchpad.net/bugs/2143850