CVE-2025-5054

Katalog CVE

CVSS 4.7 · Medium EPSS 0,76%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada canonical apport, canonical ubuntu linux. Skor CVSS 3.1 4.7 (Medium) menurut ubuntu.com.

Deskripsi (NVD)

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was being called before `consistency_checks`, which attempts to detect if the crashing process had been replaced. Because of this, if a process crashed and was quickly replaced with a containerized one, apport could be made to forward the core dump to the container, potentially leaking sensitive information. `consistency_checks` is now being called before `_check_global_pid_and_forward`. Additionally, given that the PID-reuse race condition cannot be reliably detected from userspace alone, crashes are only forwarded to containers if the kernel provided a pidfd, or if the crashing process was unprivileged (i.e., if dump mode == 1).

Rincian

Terbit di NVD

30 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber ubuntu.com
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 53,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt exploit · mitigasi · advisory pihak ketiga
• https://ubuntu.com/security/CVE-2025-5054 advisory pihak ketiga
• https://ubuntu.com/security/notices/USN-7545-1 advisory pihak ketiga
• http://seclists.org/fulldisclosure/2025/Jun/9