Nimbuspwn, Linux vulnerability discovered by Microsoft that could grant superuser rights

nimbuspwn

How these types of companies like to see the speck in someone else's eye and turn a blind eye to the beam in their own. It's something I think about when, for example, Google discovers and publishes a vulnerability in iOS, while keeping quiet about those in Android. But here it seems that everyone distributes, and Microsoft it is not less. In recent presentations they even say that "Microsoft loves Linux", and it has to be true, because it has been in charge of discovering Linux. nimbuspwn, a vulnerability in systems using the kernel developed by Linus Torvalds.

Although, as informs The Indian Express, actually Nimbuspwn is not a vulnerability, but a vulnerability group that could be exploited by malicious users to gain root access on Linux-based operating systems. Among the things that attackers could do, they could create backdoors, and the group of flaws could fuel the arrival of more threats that make use of malware and ransomware to create a greater impact on the vulnerable device.

Nimbuspwn already has patches available

The Indian Express doesn't go into much detail about what is needed to exploit the vulnerabilities, saying only that Microsoft researchers discovered them by listening for messages on the BUS system while scanning services running as root. They discovered a strange pattern in the networkd-dispatcher of systemd, and with it many security flaws.

Without more detailed information, I would say that in order to exploit the vulnerabilities you had to have physical access to the computer. And yes, I said “had”, because Microsoft shared its discovery with Linux code maintainers through its MSVR (Microsoft Security Vulnerability Research) program and the problems have already been solved. Therefore, and as we always say, it is worth keeping your computer always well updated.


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.