Linux Core Dump Flaws Threaten Password and Data Security
TL;DR Summary
Two race condition vulnerabilities in Linux core dump handlers (apport and systemd-coredump) could allow local attackers to access sensitive information, including password hashes, on Ubuntu, RHEL, and Fedora systems. Mitigations include disabling core dumps for SUID binaries, and patches are recommended to prevent exploitation.
- New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora The Hacker News
- Two Linux flaws can lead to the disclosure of sensitive data Security Affairs
- Qualys TRU Discovers Two Local Information Disclosure Vulnerabilities in Apport and systemd-coredump: CVE-2025-5054 and CVE-2025-4598 Qualys
- Linux Crash Dump Flaws Expose Passwords, Encryption Keys Bank Info Security
Reading Insights
Total Reads
0
Unique Readers
0
Time Saved
3 min
vs 4 min read
Condensed
93%
670 → 44 words
Want the full story? Read the original article
Read on The Hacker News