atop through 2.11.0 allows local users to cause a denial of service
(e.g., assertion failure and application exit) or possibly have
unspecified other impact by running certain types of unprivileged
processes while a different user runs atop. (CVE-2025-31160)
- https://bugs.mageia.org/show_bug.cgi?id=34139
- https://www.openwall.com/lists/oss-security/2025/03/26/2
- https://www.openwall.com/lists/oss-security/2025/03/26/3
-
- https://news.ycombinator.com/item?id=43485980
- https://news.ycombinator.com/item?id=43477057
- https://www.openwall.com/lists/oss-security/2025/03/29/1
-
- https://lists.debian.org/debian-security-announce/2025/msg00054.html
- https://www.cve.org/CVERecord?id=CVE-2025-31160
- 9/core/atop-2.8.1-1.1.mga9
Get the latest Linux and open source security news straight to your inbox.