CVE-2026-25704 in pop-os cosmic-greeter

摘要 (英语)

A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in  cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before https://github.Com/pop-os/cosmic-greeter/pull/426.

负责

suse

预定

2026-02-05

披露

2026-03-30

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
354161	pop-os cosmic-greeter Local Privilege Escalation	271	未定义	官方修复	CVE-2026-25704