p PatchFirst

CVE-2026-35535

CVE-2026-35535

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS 7.4 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • sudo

    Versions
    • ≥ 0, < 3e474c2f201484be83d994ae10a4e20e8c81bb69: Affected (git)

    Update to 3e474c2f201484be83d994ae10a4e20e8c81bb69

  • sudo Debian:12

    Versions
    • 1.9.13p3-1
    • 1.9.13p3-1+deb12u1
    • 1.9.13p3-1+deb12u2
    • 1.9.13p3-1+deb12u3
    Affected ranges
    • ECOSYSTEM: < 1.9.13p3-1+deb12u4

    Update to 1.9.13p3-1+deb12u4

  • sudo Debian:13

    Versions
    • 1.9.16p2-3
    • 1.9.16p2-3+deb13u1
    Affected ranges
    • ECOSYSTEM: < 1.9.16p2-3+deb13u2

    Update to 1.9.16p2-3+deb13u2

  • sudo Debian:14

    Versions
    • 1.9.16p2-3
    • 1.9.17p1-1
    • 1.9.17p2-1
    • 1.9.17p2-1exp1
    • 1.9.17p2-2
    • 1.9.17p2-3
    • 1.9.17p2-4
    Affected ranges
    • ECOSYSTEM: < 1.9.17p2-5

    Update to 1.9.17p2-5

  • sudo Ubuntu:22.04:LTS

    Versions
    • 1.9.5p2-3ubuntu2
    • 1.9.9-1ubuntu2
    • 1.9.9-1ubuntu2.1
    • 1.9.9-1ubuntu2.2
    • 1.9.9-1ubuntu2.3
    • 1.9.9-1ubuntu2.4
    • 1.9.9-1ubuntu2.5
    Affected ranges
    • ECOSYSTEM: < 1.9.9-1ubuntu2.6

    Update to 1.9.9-1ubuntu2.6

  • sudo Ubuntu:24.04:LTS

    Versions
    • 1.9.14p2-1ubuntu1
    • 1.9.15p5-3ubuntu1
    • 1.9.15p5-3ubuntu3
    • 1.9.15p5-3ubuntu4
    • 1.9.15p5-3ubuntu5
    • 1.9.15p5-3ubuntu5.24.04.1
    Affected ranges
    • ECOSYSTEM: < 1.9.15p5-3ubuntu5.24.04.2

    Update to 1.9.15p5-3ubuntu5.24.04.2

  • sudo Ubuntu:25.10

    Versions
    • 1.9.16p2-1ubuntu1
    • 1.9.16p2-1ubuntu4
    • 1.9.16p2-3ubuntu2
    • 1.9.17p2-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1.9.17p2-1ubuntu1.1

    Update to 1.9.17p2-1ubuntu1.1

Original sources

Check your server →