Privilege Escalation Vulnerability in GNU Hurd by GNU

CVE-2021-43411

Summary

A vulnerability has been identified in GNU Hurd that occurs when executing a setuid executable. The flaw creates a time window where a process gains elevated privileges while still referencing the old task through its old process port. This situation can be exploited to ultimately gain full root access, posing significant security risks for systems running vulnerable versions of GNU Hurd.

References