Race Condition Vulnerability in Needrestart by Qualys

CVE-2024-48991

What is CVE-2024-48991?

A vulnerability identified in Needrestart prior to version 3.8 can be exploited by local attackers to execute arbitrary code with root privileges. This is achieved through a race condition that allows an attacker to manipulate the system into using a malicious Python interpreter in place of the intended one. Although an initial security patch was introduced, it inadvertently created a regression that was later resolved. Users are advised to update to the latest version of Needrestart to mitigate the associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References