Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

Linux Security Vulnerabilities Identified in Sudo Utility

Cybersecurity researchers have discovered two critical vulnerabilities in the Linux Sudo command-line utility, reported by Stratascale researcher Rich Mirch. These security flaws could allow attackers to escalate privileges to root on susceptible machines. The vulnerabilities have widespread implications for Linux distributions and underscore the importance of regular updates.

• CVE-2025-32462: Involves inappropriate command execution on unintended machines due to misconfigured sudoers files.
• CVE-2025-32463: Allows root access through a user-controlled directory when using the chroot option.
• Mitigation: Users should update to Sudo version 1.9.17p1 to address these flaws across various Linux distributions.