https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 13:55:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04053 bdu:2022-04053 https://cve.radiocsirt.org/vuln/bdu:2022-04053 https://cve.radiocsirt.org/vuln/euvd-2026-16791 EUVD-2026-16791 https://cve.radiocsirt.org/vuln/euvd-2026-16791 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31214 <p>A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker&#39;s control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.</p> <p>A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker&#39;s control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31214 https://cve.radiocsirt.org/vuln/ghsa-m2xv-wgqg-4gxh <p>A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker&#39;s control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.</p> <p>A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker&#39;s control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.</p> https://cve.radiocsirt.org/vuln/ghsa-m2xv-wgqg-4gxh https://cve.radiocsirt.org/vuln/gsd-2022-31214 gsd-2022-31214 https://cve.radiocsirt.org/vuln/gsd-2022-31214 https://cve.radiocsirt.org/vuln/opensuse-su-2022:10015-1 <p>Security update for firejail</p> <p>Security update for firejail</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:10015-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31214 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firejail, Ubuntu:18.04:LTS: firejail, Ubuntu:20.04:LTS: firejail, Ubuntu:22.04:LTS: firejail, Ubuntu:24.04:LTS: firejail, Ubuntu:25.10: firejail, Ubuntu:26.04:LTS: firejail</p> <p>A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker&#39;s control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: firejail, Ubuntu:18.04:LTS: firejail, Ubuntu:20.04:LTS: firejail, Ubuntu:22.04:LTS: firejail, Ubuntu:24.04:LTS: firejail, Ubuntu:25.10: firejail, Ubuntu:26.04:LTS: firejail</p> <p>A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker&#39;s control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31214