Description
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dmidecode | 3.5-1 | — |
| Debian 13 | dmidecode | 3.5-1 | — |
| Debian 12 | dmidecode | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | cpu-x | No fix yet | — |
| Ubuntu 26.04 LTS | cpu-x | No fix yet | — |
| Ubuntu 25.10 | cpu-x | No fix yet | — |
| Ubuntu 24.04 LTS | cpu-x | No fix yet | — |
| Ubuntu 22.04 LTS | cpu-x +1 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | cpu-x +1 | No fix yet | — |
| Ubuntu 18.04 LTS | dmidecode | No fix yet | — |
| Ubuntu 16.04 LTS | dmidecode | No fix yet | — |
| Ubuntu 14.04 LTS | dmidecode | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | dmidecode | 1:3.3-7.el9_2.1 | RHSA-2023:5061 |
| RHEL 8 | dmidecode | 1:3.3-4.el8_8.1 | RHSA-2023:5252 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | dmidecode | 1:3.3-7.el9_2.1 | ALSA-2023:5061 |
| AlmaLinux 8 | dmidecode | 1:3.3-4.el8_8.1 | ALSA-2023:5252 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | dmidecode | 1:3.3-7.el9_2.1 | RLSA-2023:5061 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | dmidecode | 3.4-150400.16.8.1 | SUSE-SU-2023:1947-1 |
| SLES 15 SP3 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLES 15 SP2 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLES 15 SP1 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLES 12 SP5 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
Show 21 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP4 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
| SLES 12 SP2 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
| SLES for SAP 15 SP3 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLES for SAP 15 SP2 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLES for SAP 15 SP1 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLES for SAP 12 SP5 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
| SLES for SAP 12 SP4 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
| SLE Real Time 15 SP3 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLE Micro 5.4 | dmidecode | 3.4-150400.16.8.1 | SUSE-SU-2023:1947-1 |
| SLE Micro 5.3 | dmidecode | 3.4-150400.16.8.1 | SUSE-SU-2023:1947-1 |
| SLE Micro 5.2 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLE Micro 5.1 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLE HPC 15 SP3 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLE HPC 15 SP2 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SLE HPC 15 SP1 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SUSE OpenStack Cloud Crowbar 9 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
| SUSE OpenStack Cloud 9 | dmidecode | 3.0-10.6.1 | SUSE-SU-2023:2044-1 |
| SUSE Manager Server 4.2 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SUSE Manager Proxy 4.2 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SUSE Enterprise Storage 7.1 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
| SUSE Enterprise Storage 7 | dmidecode | 3.2-150100.9.16.1 | SUSE-SU-2023:2215-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | dmidecode | 3.4-150400.16.8.1 | SUSE-SU-2023:1947-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.3 | dmidecode | 3.4-150400.16.8.1 | SUSE-SU-2023:1947-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | dmidecode | 1:3.5-1.amzn2023.0.2 | ALAS2023-2023-328 |
| Amazon Linux 2 | dmidecode | 1:3.2-5.amzn2.1.1 | ALAS2-2024-2395 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | dmidecode | 3.5-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | dmidecode | 1:3.3-7.el9_2.1 | ELSA-2023-5061 |
| Oracle Linux 8 | dmidecode | 1:3.3-4.el8_8.1 | ELSA-2023-5252 |
Advisories 16
- ALSA-2023:5061 Moderate: dmidecode security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5252 Moderate: dmidecode security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- RHSA-2023:5061 Red Hat Security Advisory: dmidecode security update Red Hat Security Advisories (RHSA) · May 1, 2026
- RHSA-2023:5252 Red Hat Security Advisory: dmidecode security update Red Hat Security Advisories (RHSA) · May 1, 2026
- RLSA-2023:5061 Moderate: dmidecode security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2023:1947-1 Security update for dmidecode SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2044-1 Security update for dmidecode SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2215-1 Security update for dmidecode SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2320 Red Hat Enterprise Linux(dmidecode): Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 6, 2025
- WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- ALAS2-2024-2395 Moderate: dmidecode security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jan 9, 2024
- WID-SEC-2023-2902 IBM Security Guardium: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 14, 2023
- ELSA-2023-5252 Moderate: dmidecode security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 20, 2023
- ELSA-2023-5061 Moderate: dmidecode security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 13, 2023
- ALAS2023-2023-328 Moderate: dmidecode security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 7, 2023
References
- https://github.com/adamreiser/dmiwrite
- https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html
- https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206
- https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2