Local Code Execution Vulnerability in Dracut by SUSE

CVE-2016-5759

What is CVE-2016-5759?

The Dracut script 'mkdumprd' is susceptible to exploitation, where local users can manipulate the current working directory to trick the system administrator into executing malicious code with root privileges. This vulnerability raises significant security concerns, particularly as it allows unauthorized users to gain elevated access, potentially compromising system integrity.

References