CVE-2024-38531: Nix sandbox escape
Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assume the permissions of a Nix daemon worker and hijack all future builds. This issue was patched in version(s) 2.23.1, 2.22.2, 2.21.3, 2.20.7, 2.19.5 and 2.18.4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38531?
CVE-2024-38531 has been rated as high severity due to the potential for privilege escalation through setuid binaries.
How do I fix CVE-2024-38531?
To mitigate CVE-2024-38531, upgrade Nix package manager to version 2.18.4 or above, or ensure that setuid binaries are not created in globally accessible locations.
What versions of Nix are affected by CVE-2024-38531?
CVE-2024-38531 affects Nix package manager versions earlier than 2.18.4 and versions between 2.19.5 and 2.22.2 as well as between 2.22.2 and 2.23.1.
What vulnerabilities does CVE-2024-38531 exploit?
CVE-2024-38531 exploits a flaw in permissions management within the build directory of Nix, allowing for unauthorized privilege escalation.
Who is impacted by CVE-2024-38531?
Users of the Nix package manager on Linux and Unix systems are primarily impacted by CVE-2024-38531.