Bug 2454714 (CVE-2026-35535)

Summary: CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: akhatavk, aos-team-art-private, asdas, crizzo, dpaolell, jdelft, jmitchel, jupierce, kshier, lgarciaa, mbiarnes, ppalepu, ppostler, prdhamdh, rhel-process-autobot, sghai, sidsharm, suppawar, teagle, vlaad, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-04-03 03:01:27 UTC
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

Comment 2 errata-xmlrpc 2026-04-27 10:48:25 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:10758 https://access.redhat.com/errata/RHSA-2026:10758

Comment 3 errata-xmlrpc 2026-04-29 08:04:02 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:11521 https://access.redhat.com/errata/RHSA-2026:11521

Comment 4 errata-xmlrpc 2026-04-30 15:39:08 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:12310 https://access.redhat.com/errata/RHSA-2026:12310

Comment 5 errata-xmlrpc 2026-05-05 12:35:37 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2026:13731 https://access.redhat.com/errata/RHSA-2026:13731

Comment 6 errata-xmlrpc 2026-05-06 00:34:29 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:13891 https://access.redhat.com/errata/RHSA-2026:13891

Comment 7 errata-xmlrpc 2026-05-06 00:35:26 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:13892 https://access.redhat.com/errata/RHSA-2026:13892

Comment 8 errata-xmlrpc 2026-05-06 00:39:30 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION

Via RHSA-2026:13896 https://access.redhat.com/errata/RHSA-2026:13896

Comment 9 errata-xmlrpc 2026-05-06 00:42:37 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:13888 https://access.redhat.com/errata/RHSA-2026:13888

Comment 10 errata-xmlrpc 2026-05-06 00:44:31 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:13889 https://access.redhat.com/errata/RHSA-2026:13889

Comment 11 errata-xmlrpc 2026-05-06 00:54:02 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:13895 https://access.redhat.com/errata/RHSA-2026:13895

Comment 12 errata-xmlrpc 2026-05-06 17:12:24 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2026:14228 https://access.redhat.com/errata/RHSA-2026:14228

Comment 13 errata-xmlrpc 2026-05-06 22:06:19 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:14437 https://access.redhat.com/errata/RHSA-2026:14437

Comment 14 errata-xmlrpc 2026-05-19 13:07:52 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19067 https://access.redhat.com/errata/RHSA-2026:19067

Comment 15 errata-xmlrpc 2026-05-19 18:03:07 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:19220 https://access.redhat.com/errata/RHSA-2026:19220

Comment 16 errata-xmlrpc 2026-05-27 16:01:56 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:20040 https://access.redhat.com/errata/RHSA-2026:20040

Comment 17 errata-xmlrpc 2026-05-29 18:53:46 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.16

Via RHSA-2026:20087 https://access.redhat.com/errata/RHSA-2026:20087

Comment 18 errata-xmlrpc 2026-06-03 14:16:08 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:21656 https://access.redhat.com/errata/RHSA-2026:21656

Comment 19 errata-xmlrpc 2026-06-04 16:33:15 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.13

Via RHSA-2026:21690 https://access.redhat.com/errata/RHSA-2026:21690

Comment 20 errata-xmlrpc 2026-06-04 16:59:24 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.12

Via RHSA-2026:21695 https://access.redhat.com/errata/RHSA-2026:21695

Comment 21 errata-xmlrpc 2026-06-11 07:53:30 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.15

Via RHSA-2026:23233 https://access.redhat.com/errata/RHSA-2026:23233

Comment 23 errata-xmlrpc 2026-07-01 11:16:08 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.14

Via RHSA-2026:28887 https://access.redhat.com/errata/RHSA-2026:28887

Comment 24 errata-xmlrpc 2026-07-09 08:02:53 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2026:34098 https://access.redhat.com/errata/RHSA-2026:34098