← CVE Intelligence

CVE-2025-46802

Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen PUBLISHED

Description (CNA)

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

Affected (CNA)

Vendor / product	Versions
SUSE / SUSE Linux Enterprise Micro 5.3	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise Micro 5.4	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise Micro 5.5	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise Module for Basesystem 15 SP6	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise Server 15 SP6	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise Desktop 15 SP6	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP6	affected ? before 4.6.2-150000.5.8.1
SUSE / SUSE Linux Enterprise High Performance Computing 15 SP6	affected ? before 4.6.2-150000.5.8.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

https://www.openwall.com/lists/oss-security/2025/05/12/1