Critical Local Privilege Escalation Vulnerability in sudo Package
Summary
ALSA-2025:9978: Important: sudo security update. Affects sudo versions < 1.9.5p2-10.el9_6.1. Fixed in 1.9.5p2-10.el9_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The sudo package is a widely used utility that allows system administrators to delegate specific privileges to users, enabling them to execute commands with elevated permissions without needing to log in as the root user. This functionality is crucial for system management and security, as it helps maintain a controlled environment while allowing necessary access. However, vulnerabilities in sudo can lead to significant security risks, especially if they allow unauthorized users to gain root access.
Vulnerability Detail
The vulnerability identified as CVE-2025-32462 is a Local Privilege Escalation (LPE) issue that arises from improper handling of host options within the sudo configuration. An attacker with access to a user account that has been granted sudo privileges could exploit this flaw to execute arbitrary commands with root privileges, potentially compromising the entire system. The ramifications of this vulnerability are severe, as it could allow unauthorized access to sensitive data and system controls.
How To Fix
Minimum fixed version
1.9.5p2-10.el9_6.1
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict the use of sudo for affected users until the package is updated. This can be done by modifying the sudoers file to remove or limit sudo privileges for specific users. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
The sudo security update addresses a critical Local Privilege Escalation vulnerability that could allow unauthorized access to system controls. It is crucial for system administrators to apply the patch promptly to protect their systems from potential exploitation. Regular monitoring for vulnerabilities using tools like Vulert can further enhance security.
See every vulnerability recorded for sudo →
FAQ
The CVE identifier for this vulnerability is CVE-2025-32462.
The vulnerability affects the sudo package on AlmaLinux 9 systems.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If exploited, this vulnerability could allow unauthorized users to gain root access, leading to data breaches, system control loss, and other severe security incidents.
Yes, you can temporarily restrict sudo access for affected users by modifying the sudoers file, but this should be followed by an update to the patched version.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
