Lact
Monthly
Authentication bypass in LACT (Linux AMD GPU Configuration Tool) through version 0.10.0 allows a local attacker with low privileges to circumvent Polkit-based access controls by exploiting PID reuse in the UnixProcessSubject / Peer PID authentication mechanism (CWE-290). By winning a race condition between Polkit's process identity check and authorization grant, an attacker can spoof their process as a legitimately authorized caller and gain unauthorized control over privileged GPU configuration operations. No public exploit code has been identified and no active exploitation has been confirmed at time of analysis.
Symlink following in LACT (Linux AMDGPU Control Tool) versions through 0.10.0 allows a local low-privileged user to redirect privileged file operations to attacker-chosen paths via a crafted UNIX symbolic link, resulting in local denial-of-service. Reported by SUSE and tracked in their Bugzilla (bsc#1276481), the flaw is rooted in CWE-61 and is confined to systems with multi-user local access where LACT is installed. No public exploit code has been identified and the issue does not appear in the CISA KEV catalog.
Authentication bypass in LACT (Linux AMD GPU Configuration Tool) through version 0.10.0 allows a local attacker with low privileges to circumvent Polkit-based access controls by exploiting PID reuse in the UnixProcessSubject / Peer PID authentication mechanism (CWE-290). By winning a race condition between Polkit's process identity check and authorization grant, an attacker can spoof their process as a legitimately authorized caller and gain unauthorized control over privileged GPU configuration operations. No public exploit code has been identified and no active exploitation has been confirmed at time of analysis.
Symlink following in LACT (Linux AMDGPU Control Tool) versions through 0.10.0 allows a local low-privileged user to redirect privileged file operations to attacker-chosen paths via a crafted UNIX symbolic link, resulting in local denial-of-service. Reported by SUSE and tracked in their Bugzilla (bsc#1276481), the flaw is rooted in CWE-61 and is confined to systems with multi-user local access where LACT is installed. No public exploit code has been identified and the issue does not appear in the CISA KEV catalog.