Description (CNA)
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / gnome-shell | affected gnome-shell downstream versions using CAP_SYS_NICE |
CWE
CWE-273
References
- https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2284
- https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2060
ADP enrichment
No English description supplied.