Critical Vulnerability in sudo Package: Local Privilege Escalation Risks
Summary
ALSA-2025:11537: Important: sudo security update. Affects sudo versions < 1.9.15-8.p5.el10_0.2. Fixed in 1.9.15-8.p5.el10_0.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that enables system administrators to grant specific users the ability to execute commands with elevated privileges, without needing to log in as the root user. This functionality is crucial for system management and security, allowing for controlled access to sensitive operations. However, vulnerabilities in sudo can pose significant security risks, particularly if they allow unauthorized users to gain root access.
Vulnerability Detail
The sudo package has been identified to contain vulnerabilities that allow local privilege escalation (LPE) through specific options. The vulnerabilities, identified as CVE-2025-32462 and CVE-2025-32463, can be exploited by attackers to gain unauthorized access to root privileges, potentially compromising the entire system. These vulnerabilities arise from improper handling of host and chroot options, which can be manipulated to bypass security restrictions.
How To Fix
Minimum fixed version
1.9.15-8.p5.el10_0.2
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict the use of sudo for users who do not require elevated privileges, thereby minimizing the risk of exploitation until the package is updated. Additionally, reviewing and adjusting the sudoers file to limit access to sensitive commands can help mitigate risks.
Conclusion
The sudo package vulnerabilities pose significant risks that can lead to unauthorized privilege escalation. It is crucial for system administrators to update to the patched version promptly and consider implementing workarounds to mitigate risks until the update can be applied. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for sudo →
FAQ
The vulnerabilities can allow unauthorized users to escalate their privileges to root, potentially leading to system compromise.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
Implement temporary workarounds such as restricting sudo access for non-administrative users and reviewing the sudoers file.
Yes, there are known exploits that can leverage these vulnerabilities to gain unauthorized root access.
Regularly check for updates, ideally weekly or bi-weekly, to ensure that your system is protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
