Vulnerability Alert | Local Privilege Escalation Vulnerabilities in Linux sudo

0x00 Vulnerability ID

  • CVE-2025-32462

  • CVE-2025-32463

0x01 Danger Level

  • High Risk

0x02 Vulnerability Overview

Sudo is a tool used in Unix-like systems that allows authorized users to execute commands with the security privileges of another user, widely used in system administration and operations.

Vulnerability Alert | Local Privilege Escalation Vulnerabilities in Linux sudo0x03 Vulnerability DetailsCVE-2025-32462Vulnerability Type:Local Privilege EscalationImpact:Privilege EscalationSummary:The Linux sudo host privilege escalation vulnerability arises from the incorrect application of the -h (–host) option’s remote host rules to the local context, allowing attackers to bypass permissions and escalate to root to execute arbitrary code. Local attackers can exploit this vulnerability to gain root privileges.CVE-2025-32463Vulnerability Type:Local Privilege EscalationImpact:Privilege EscalationSummary:The Linux sudo chroot privilege escalation vulnerability allows local low-privileged users to trigger dynamic library loading through a specially crafted malicious chroot environment, thereby executing arbitrary code with root privileges.0x04 Affected Versions

CVE-2025-32462

  • 1.9.0 <= sudo <= 1.9.17

  • 1.8.8 <= sudo <= 1.8.32

CVE-2025-32463

  • 1.9.14 <= sudo <= 1.9.17

0x05 POC Status

  • Publicly Disclosed

0x06 Fix Recommendations

The official patch has been released, and users are advised to upgrade to a secure version.:https://www.sudo.ws/

Related posts

  1. Common Linux Commands – Part 2
  2. Rust for Linux: Rust Kernel Policy
  3. Summary of Linux Server Hardware Information Queries and Daily Maintenance Commands
  4. Linux Privilege Escalation (CVE-2025-6019): Achieving Root Access via udisksd and libblockdev
  5. Common Linux Network Configuration Commands and Examples
  6. Hello World in FreeRTOS
  7. Linux io_uring Proof-of-Concept Rootkit Bypasses System Call-Based Threat Detection Tools
  8. Practical Guide to Network Parameter Tuning in High-Concurrency Linux Scenarios
  9. Achieving 2 TOPS/W Efficiency! Unveiling Low Power Design Techniques for Edge AI Chips
  10. Summary of Linux Knowledge Points
  11. Introduction to the C-5 Galaxy Transport Aircraft
  12. Overview of Myelofibrosis Treatment and Research
  13. The Next Leap of Edge AI: Towards an ‘Agent Operating System’
  14. Installing and Configuring Redis 8.0.0 on Linux
  15. Security Measures to Prevent Injection Attacks When Deploying Large-Scale Models on Linux Systems
  16. Comic Analysis: What Does the Linux Kernel Look Like?
  17. Discussing the Linux Signal Mechanism in .NET Dumps
  18. New American Luxury: A Review of the Lincoln Zephyr
  19. Concurrency and Race Conditions in Linux

Leave a Comment