Privilege Escalation in Fedora Linux: Exploiting ABRT for Root

Posted by ementally on Sunday December 07, 2025 @09:55AM
from the initblog.com dept.

https://initblog.com/2025/abrt-root/

( 2 comments | 2 points | on HN )

Re:Privilege Escalation in Fedora Linux: Exploiting ABRT for... by westurner on Sunday December 07, 2025 @12:14PM (#46183254)

  g_autofree char *docker_inspect_cmdline = NULL;
  if (root_dir != NULL)
    docker_inspect_cmdline = g_strdup_printf("chroot %s /bin/sh -c \"docker inspect %s\"", root_dir, container_id);
  else
    docker_inspect_cmdline = g_strdup_printf("docker inspect %s", container_id);

What static and dynamic analysis tools and rules could have found this vuln?

[ Parent | on HN ]

Re:Privilege Escalation in Fedora Linux: Exploiting ABRT for... by westurner on Sunday December 07, 2025 @12:15PM (#46183267)

Almost regex:

  .*cmd.*=.*printf.*%s

[ Parent | on HN ]