https://seclists.org/oss-sec/2024/q4/16: CVE-2024-47191: Local root exploit in the PAM module pam_oath.so
Published Oct 8, 2024
·Updated
Affected Software
1 affected component
Openwall oath-toolkit
Frequently Asked Questions
1
Do the available fixes also drop or switch supplementary groups?
No. The discussion states that neither the SUSE nor upstream patches change supplementary groups, even though the patch paths change the effective user and group IDs used during access.
2
How do the SUSE and upstream fixes differ?
SUSE's approach forks and calls setgid() and setuid() in the child, together with openat() and flag handling. Upstream instead uses setegid() and seteuid() to switch temporarily and then switch back, and uses fopen() with the "x" mode.