Privilege Escalation Vulnerability in GNU Hurd by GNU
CVE-2021-43411

7.5HIGH

Key Information:

Vendor: Gnu
Status: Hurd
Vendor: CVE Published:; 7 November 2021

What is CVE-2021-43411?

A vulnerability has been identified in GNU Hurd that occurs when executing a setuid executable. The flaw creates a time window where a process gains elevated privileges while still referencing the old task through its old process port. This situation can be exploited to ultimately gain full root access, posing significant security risks for systems running vulnerable versions of GNU Hurd.