Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-41259

Опубликовано: 03 июн. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update.

РелизСтатусПримечание
devel

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

questing

ignored

end of life, was needs-triage
resolute

needs-triage

upstream

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 1%
0.00101
Низкий

Связанные уязвимости

nvd
3 месяца назад

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update.

debian
3 месяца назад

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TO ...

github
3 месяца назад

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update.

EPSS

Процентиль: 1%
0.00101
Низкий
Уязвимость CVE-2025-41259