Cve 2025 3156

Cve 2025 3156. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file. Advisory by baron samedit of qualys and stephen tong (stong) for the c based.

The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file. The sudo package is installed by default on red hat enterprise linux (rhel) and allows users to execute commands as other users, most commonly root.