CVE-2024-28085

An privilege chaining vulnerability was discovered in the util-linux package. A local, authenticated attacker could use mesg or wall to takeover another user's account.

This vulnerability doesn't affect any supported Red Hat products. The mesg and wall programs are installed without setgid permissions, which prevents exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.