Back to vendor advisories
Ubuntu Security NoticesUSN-8803-1

USN-8803-1: Sudo vulnerability

Severity not listed 0 CVEs Published Sep 22, 2026 at 2:15 PM UTC

Summary

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were executed under certain circumstances. A local attacker permitted to run specific commands could possibly use this issue to bypass policy enforcement and logging, executing unauthorized programs.

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 0

No CVE identifiers were listed in the collected bulletin.

Updates

  1. Published by Ubuntu

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.