REDHAT-BUG-688323: Race Condition
It was discovered that the GNOME Display Manager (gdm) cleared the cache directory, which is owned by an unprivileged user, with the privileges of the root user. A race condition exists in gdm where a local user could take advantage of this by writing to the cache directory between ending the session and the signal to clean up the session, which could lead to the execution of arbitrary code as the root user.
Acknowledgements:
Red Hat would like to thank Sebastian Krahmer of the SUSE Security Team for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-688323?
The severity of REDHAT-BUG-688323 is considered to be high due to the potential for a local user to exploit a race condition.
How do I fix REDHAT-BUG-688323?
To fix REDHAT-BUG-688323, it is recommended to update the GNOME Display Manager to the latest patched version.
What software is affected by REDHAT-BUG-688323?
REDHAT-BUG-688323 affects the GNOME Display Manager, which is responsible for managing user sessions.
Can an unprivileged user exploit REDHAT-BUG-688323?
Yes, an unprivileged user can exploit REDHAT-BUG-688323 by taking advantage of a race condition in the cache directory.
What is the nature of the vulnerability in REDHAT-BUG-688323?
The nature of the vulnerability in REDHAT-BUG-688323 is a race condition that leads to improper handling of the cache directory, allowing potential unauthorized access.