Race Condition Vulnerability in Needrestart by Qualys

CVE-2024-48991

What is CVE-2024-48991?

A vulnerability identified in Needrestart prior to version 3.8 can be exploited by local attackers to execute arbitrary code with root privileges. This is achieved through a race condition that allows an attacker to manipulate the system into using a malicious Python interpreter in place of the intended one. Although an initial security patch was introduced, it inadvertently created a regression that was later resolved. Users are advised to update to the latest version of Needrestart to mitigate the associated risks.

References