USN-8092-1
sudo vulnerability
No scoreFix available
It was discovered that Sudo incorrectly checked return codes when dropping privileges to run the mailer. A local attacker could possibly use this issue to escalate privileges.
What each source reports
OSV No score
sudo vulnerability
It was discovered that Sudo incorrectly checked return codes when dropping privileges to run the mailer. A local attacker could possibly use this issue to escalate privileges.
- Record
USN-8092-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoUbuntu:22.04:LTS |
before 1.9.9-1ubuntu2.6, plus listed versions 1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.21.9.9-1ubuntu2.31.9.9-1ubuntu2.41.9.9-1ubuntu2.5 |
1.9.9-1ubuntu2.6 |
sudoUbuntu:24.04:LTS |
before 1.9.15p5-3ubuntu5.24.04.2, plus listed versions 1.9.14p2-1ubuntu11.9.15p5-3ubuntu11.9.15p5-3ubuntu31.9.15p5-3ubuntu41.9.15p5-3ubuntu51.9.15p5-3ubuntu5.24.04.1 |
1.9.15p5-3ubuntu5.24.04.2 |
sudoUbuntu:25.10 |
before 1.9.17p2-1ubuntu1.1, plus listed versions 1.9.16p2-1ubuntu11.9.16p2-1ubuntu41.9.16p2-3ubuntu21.9.17p2-1ubuntu1 |
1.9.17p2-1ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8092-1 is a vulnerability with no CVSS score yet in sudo, published March 12, 2026. No source lists public exploit code. Fixed in sudo 1.9.9-1ubuntu2.6.