'Alarming' bugs lay low in Linux's needrestart for decade
https://www.theregister.com/2024/11/21/qualys_needrestart_linux_vulnerabilities/

CVE- 2024-48990 : Linux LPE via needrestart

PATCHED: Nov 19, 2024

PoC: https://github.com/makuga01/CVE-2024-48990-PoC

Info: https://www.qualys.com/2024/11/19/needrestart/needrestart.txt

P.S. Although you need to wait for needrestart to run for the add-on (which starts, for example, with apt upgrade ), the patch is only three days old, and it has not yet been added to all Debian repos)

#exploit #pentest #redteam #lpe #linux