Vulnerability · Published Apr 3, 2026 · Assigned by mitre
CVE-2026-35535
High 7.4
In plain English
A high-severity security flaw in Sudo from Sudo project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.2%top 92.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | sudo | 1.9.15-10.p5.el10_1 | ALSA-2026:10758 |
| AlmaLinux:10 | sudo | 1.9.17-4.p2.el10_2 | ALSA-2026:19067 |
| AlmaLinux:8 | sudo | 1.9.5p2-1.el8_10.5 | ALSA-2026:11521 |
| AlmaLinux:9 | sudo | 1.9.5p2-15.el9_7 | ALSA-2026:12310 |
| AlmaLinux:9 | sudo | 1.9.17p2-3.el9_8 | ALSA-2026:19220 |
| AlmaLinux:10 | sudo-python-plugin | 1.9.15-10.p5.el10_1 | ALSA-2026:10758 |
| AlmaLinux:10 | sudo-python-plugin | 1.9.17-4.p2.el10_2 | ALSA-2026:19067 |
| AlmaLinux:9 | sudo-python-plugin | 1.9.17p2-3.el9_8 | ALSA-2026:19220 |
| AlmaLinux:9 | sudo-python-plugin | 1.9.5p2-15.el9_7 | ALSA-2026:12310 |
| Debian:12 | sudo | 1.9.13p3-1+deb12u4 | DEBIAN-CVE-2026-35535 |
| Debian:13 | sudo | 1.9.16p2-3+deb13u2 | DEBIAN-CVE-2026-35535 |
| Debian:14 | sudo | 1.9.17p2-5 | DEBIAN-CVE-2026-35535 |
| Rocky Linux:10 | sudo | 0:1.9.15-10.p5.el10_1 | RLSA-2026:10758 |
| Rocky Linux:10 | sudo | 0:1.9.17-4.p2.el10_2 | RLSA-2026:19067 |
| Rocky Linux:8 | sudo | 0:1.9.5p2-1.el8_10.5 | RLSA-2026:11521 |
| Rocky Linux:9 | sudo | 0:1.9.17p2-3.el9_8 | RLSA-2026:19220 |
| Rocky Linux:9 | sudo | 0:1.9.5p2-15.el9_7 | RLSA-2026:12310 |
| Ubuntu:22.04:LTS | sudo | 1.9.9-1ubuntu2.6 | UBUNTU-CVE-2026-35535 |
| Ubuntu:24.04:LTS | sudo | 1.9.15p5-3ubuntu5.24.04.2 | UBUNTU-CVE-2026-35535 |
| Ubuntu:25.10 | sudo | 1.9.17p2-1ubuntu1.1 | UBUNTU-CVE-2026-35535 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sudo project | Sudo | 0 – before 3e474c2f201484be83d994ae10a4e20e8c81bb69 |
Weakness: CWE-271, CWE-272 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69
- https://www.qualys.com/2026/03/10/crack-armor.txt
- https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042
- https://bugs.debian.org/1130593
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
- https://lists.debian.org/debian-lts-announce/2026/06/msg00003.html
- https://access.redhat.com/security/cve/CVE-2026-35535 vdb-entry, x_refsource_REDHAT
- RHBZ#2454714 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:13896 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13895 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21695 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21690 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28887 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23233 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20087 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34098 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21656 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20040 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13888 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10758 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19067 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13731 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13891 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14437 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13889 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12310 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19220 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11521 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14228 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13892 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30088 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21275 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:58981 vendor-advisory, x_refsource_REDHAT