Log in Start free

Vulnerability · Published Mar 26, 2025 · Assigned by mitre

CVE-2025-31160

Low 2.9

In plain English

A low-severity security flaw in atop from atop project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)2.9Low
Exploit odds (30 days)0.2%top 87.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.21atop2.11.1-r0ALPINE-CVE-2025-31160
Alpine:v3.22atop2.11.1-r0ALPINE-CVE-2025-31160
Alpine:v3.23atop2.11.1-r0ALPINE-CVE-2025-31160
Alpine:v3.24atop2.11.1-r0ALPINE-CVE-2025-31160
Debian:12atop2.8.1-1+deb12u1DEBIAN-CVE-2025-31160
Debian:12atop2.8.1-1+deb12u1DSA-5892-1
Debian:13atop2.11.1-1DEBIAN-CVE-2025-31160
Debian:14atop2.11.1-1DEBIAN-CVE-2025-31160
Ubuntu:22.04:LTSatopno fix listedUBUNTU-CVE-2025-31160
Ubuntu:24.04:LTSatopno fix listedUBUNTU-CVE-2025-31160
Ubuntu:25.10atopno fix listedUBUNTU-CVE-2025-31160
Ubuntu:26.04:LTSatopno fix listedUBUNTU-CVE-2025-31160
Ubuntu:26.10atopno fix listedUBUNTU-CVE-2025-31160

Affected products (as reported)

VendorProductVersions
atop project atop 0 – through 2.11.0

Weakness: CWE-617 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References