CVE-2025-31160

Description

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.

References

https://seclists.org/oss-sec/2025/q1/258

https://seclists.org/oss-sec/2025/q1/247

https://rachelbythebay.com/w/2025/03/26/atop/

https://news.ycombinator.com/item?id=43485980

https://news.ycombinator.com/item?id=43477057

https://github.com/Atoptool/atop

https://blog.bismuth.sh/blog/bismuth-found-the-atop-bug

http://www.openwall.com/lists/oss-security/2025/03/29/1

http://www.openwall.com/lists/oss-security/2025/03/27/3

http://www.openwall.com/lists/oss-security/2025/03/27/2

http://www.openwall.com/lists/oss-security/2025/03/27/1

http://www.openwall.com/lists/oss-security/2025/03/26/3

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3