{"id":"USN-8092-1","aliases":[],"status":"published","title":"sudo vulnerability","description":"It was discovered that Sudo incorrectly checked return codes when dropping\nprivileges to run the mailer. A local attacker could possibly use this\nissue to escalate privileges.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-03-12T20:07:28Z","modified":"2026-04-07T12:29:19Z","fixes":[{"ecosystem":"Ubuntu:22.04:LTS","package":"sudo","fixed_in":["1.9.9-1ubuntu2.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"sudo","fixed_in":["1.9.15p5-3ubuntu5.24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"sudo","fixed_in":["1.9.17p2-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.6"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1","1.9.9-1ubuntu2.2","1.9.9-1ubuntu2.3","1.9.9-1ubuntu2.4","1.9.9-1ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-3ubuntu5.24.04.2"}]}],"versions":["1.9.14p2-1ubuntu1","1.9.15p5-3ubuntu1","1.9.15p5-3ubuntu3","1.9.15p5-3ubuntu4","1.9.15p5-3ubuntu5","1.9.15p5-3ubuntu5.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17p2-1ubuntu1.1"}]}],"versions":["1.9.16p2-1ubuntu1","1.9.16p2-1ubuntu4","1.9.16p2-3ubuntu2","1.9.17p2-1ubuntu1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-8092-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/2143042","tags":["report"]}],"sources":{"osv":[{"id":"USN-8092-1","title":"sudo vulnerability","description":"It was discovered that Sudo incorrectly checked return codes when dropping\nprivileges to run the mailer. A local attacker could possibly use this\nissue to escalate privileges.","status":"published","published":"2026-03-12T20:07:28Z","modified":"2026-04-07T12:29:19.141118915Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}