THE article discusses a critical Linux vulnerability, the suTrap local privilege escalation flaw, which allows unprivileged users to gain root access. This vulnerability relates to how the shadow-utils package handles interactive terminal sessions, permitting attackers to exploit the TIOCSTI feature to execute malicious commands as root. It affects several enterprise Linux distributions, including RHEL 9 and Rocky Linux 9, particularly those using kernel 5.14 with legacy TIOCSTI enabled.
To mitigate the threat, users are advised to upgrade to shadow-utils version 4.20.0 or later, and system administrators are recommended to avoid running interactive su sessions from root accounts.