VULNERABILITY INTELLIGENCE

CVE-2021-43411

CVSS score7.5 HIGH
EPSS probability1.27%
CISA KEVNot currently listed
Published2021-11-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root access.

Weakness classification

  • nvd@nist.gov: CWE-362

Primary references