attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
canonical accountsservice
Classified as
CWE-273 (Improper Check for Dropped Privileges)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
canonical
accountsservice
Subsystems
General OT
Sectors
Multiple
What to Know
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation. (NVD)
What to Do
Monitor canonical's web page for any future patch releases.