A local privilege escalation vulnerability exists in Sudo due to an incorrect return code check when dropping privileges to run the mailer, allowing an attacker to potentially gain administrator access. The vulnerability affects Ubuntu 25.10 (sudo package version 1.9.17p2-1ubuntu1), 24.04 LTS (sudo package version 1.9.15p5-3ubuntu5.24.04), and 22.04 LTS (sudo package version 1.9.9-1ubuntu2). It is corrected by updating to sudo package versions 1.9.17p2-1ubuntu1.1 for Ubuntu 25.10, 1.9.15p5-3ubuntu5.24.04.2 for Ubuntu 24.04 LTS, and 1.9.9-1ubuntu2.6 for Ubuntu 22.04 LTS.
Ubuntu Security Notices USN-8092-1 USN-8092-1: Sudo vulnerability Publication date 12 March 2026 Overview Sudo could be made to run programs as an administrator. Releases 25.10 24.04 LTS 22.04 LTS Open side navigation Close side navigation Packages Details Update instructions References Packages sudo - Provide limited super user privileges to specific users Details It was discovered that Sudo incorrectly checked return codes when dropping privileges to run the mailer. A local attacker could possibly use this issue to escalate privileges. It was discovered that Sudo incorrectly checked return codes when dropping privileges to run the mailer. A local attacker could possibly use this issue to escalate privileges. Update instructions In general, a standard system update will make all the necessary changes. Learn more about how to get the fixes. The problem can be corrected by updating your system to the following package versions: Ubuntu Release Package Version 25.10 questing sudo – 1.9.17p2-1ubuntu1.1 24.04 LTS noble sudo – 1.9.15p5-3ubuntu5.24.04.2 sudo-ldap – 1.9.15p5-3ubuntu5.24.04.2 22.04 LTS jammy sudo – 1.9.9-1ubuntu2.6 sudo-ldap – 1.9.9-1ubuntu2.6 Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. Get Ubuntu Pro References https://launchpad.net/bugs/2143042