Critical Security Update for Atop: Addressing CVE-2025-31160
Summary
DLA-4117-1: atop - security update. Affects atop versions < 2.6.0-2+deb11u1. Fixed in 2.6.0-2+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Atop is a powerful system and process monitor for Linux that provides detailed information about system resource usage. It is widely used for performance monitoring and troubleshooting. The package allows users to view real-time data on CPU, memory, disk, and network usage, making it an essential tool for system administrators. However, a recently discovered vulnerability (CVE-2025-31160) poses a significant risk to its users, necessitating immediate attention.
Vulnerability Detail
The vulnerability identified as CVE-2025-31160 in the Atop package allows unauthorized access to sensitive system information. This issue arises from improper handling of user input, which could lead to information disclosure or unauthorized command execution. If exploited, an attacker could gain insights into system performance metrics, potentially leading to further attacks or data breaches. The vulnerability affects versions prior to 2.6.0-2+deb11u1, making it critical for users to update their installations promptly.
How To Fix
Minimum fixed version
2.6.0-2+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade atopTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the Atop tool by restricting its execution to trusted users only. This can be done by modifying the permissions of the Atop binary using the command: 'sudo chmod 700 /usr/bin/atop'. This will prevent unauthorized users from running the tool until the package is updated.
Conclusion
The Atop package has a critical vulnerability (CVE-2025-31160) that requires immediate action from users. By updating to version 2.6.0-2+deb11u1, users can protect their systems from unauthorized access to sensitive information. Implementing the suggested workaround can provide temporary relief until the update is applied.
See every vulnerability recorded for atop →
FAQ
CVE-2025-31160 is a security vulnerability in the Atop package that allows unauthorized access to sensitive system information.
You can check your version of Atop by running 'atop -v' in the terminal. If it is older than 2.6.0-2+deb11u1, it is affected.
Failing to update Atop could expose your system to potential attacks, including unauthorized access to sensitive performance data.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by vulnerabilities without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for atop.
