Local Privilege Escalation in GNU Hurd Affected by libports

CVE-2021-43412

Summary

A vulnerability exists in GNU Hurd where libports improperly processes fake notification messages from clients on any port. This flaw can lead to a use-after-free issue, allowing an attacker to escalate local privileges to gain full root access. Such an exploit can significantly compromise the integrity and security of the system, emphasizing the need for timely updates and patches.

References