Denial of Service Vulnerability in atop Package: CVE-2025-31160
Summary
CVE-2025-31160: atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a diff... Affects atop across 2 version ranges.
< 2.11.1-r0
< e530cfd606d3e1a91d306187b28d7a18040e52e6
Fixed in 2.11.1-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The atop package is a performance monitoring tool for Linux that provides detailed insights into system resource usage. It allows users to monitor processes, memory, CPU, and disk usage in real-time. The tool is widely used by system administrators to diagnose performance issues and optimize resource allocation. However, a vulnerability has been identified that could allow local users to disrupt the service, leading to potential denial of service.
Vulnerability Detail
CVE-2025-31160 is a vulnerability in the atop package, specifically versions up to 2.11.0. It allows local users to cause a denial of service by executing certain types of unprivileged processes while another user runs atop. This can lead to assertion failures and application exits, potentially impacting system monitoring and performance diagnostics. The vulnerability arises from improper handling of concurrent processes, which can lead to instability in the atop application.
How To Fix
Minimum fixed version
2.11.1-r0
This is the first release that contains the fix.
sudo apk add --upgrade atopTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid running unprivileged processes while atop is being executed by another user. This can help mitigate the risk of triggering the denial of service condition until a patch is applied.
Conclusion
CVE-2025-31160 represents a significant vulnerability in the atop package that can lead to denial of service. Users are encouraged to update their installations to the latest version to mitigate risks. Until a patch is applied, following the recommended workarounds can help maintain system stability.
See every vulnerability recorded for atop →
FAQ
CVE-2025-31160 is a vulnerability in the atop package that allows local users to cause a denial of service.
The vulnerability affects atop versions up to 2.11.0.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
As a temporary measure, avoid running unprivileged processes while atop is being executed by another user.
For more information about open-source vulnerabilities, you can visit Vulert at https://vulert.com, which monitors and alerts for vulnerabilities using a manifest file.
Related vulnerabilities
Recent vulnerabilities recorded for atop.
