Cpe:2.3:a:pardus:pardus_about:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aparduspardus_about/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 09:29:33 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPardus About: Local privilege escalation (CVE-2026-87772)https://feed.craftedsignal.io/briefs/2026-11-pardus-priv-esc-cve-2026-87772/Thu, 12 Nov 2026 09:29:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-pardus-priv-esc-cve-2026-87772/The Pardus About utility contains a local privilege escalation vulnerability that allows unprivileged users to execute setuid-root binaries by leveraging improper Polkit authorization and unsafe mount options.CVE-2026-87772 is a local privilege escalation vulnerability in the Pardus About utility. The vulnerability allows an unprivileged user with an active local desktop session to execute a root-privileged helper without authentication. This helper mounts attached partitions using insecure defaults that fail to set the nosuid flag, enabling the execution of setuid-root binaries.

Attack Chain

  1. An unprivileged user with an active desktop session triggers a root helper via Polkit without authentication.
  2. The helper mounts a partition controlled by the user with insecure options.
  3. The user executes a setuid-root binary from the mounted partition to gain root privileges.

Impact

Successful exploitation allows an unprivileged local user to obtain root-level control over the target system.

Recommendation

Upgrade the Pardus About utility to version 1.2.5 or later. Alternatively, modify the Polkit policy for the affected action to require administrative authentication.

]]>highadvisory