Description
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tuned | tuned | 2.10.0-1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | tuned +1 | 0.2.19-11.el6 | RHBA-2013:0386 |
Advisories 1
- RHBA-2013:0386 Red Hat Bug Fix Advisory: tuned bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025