runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminals input buffer.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Util-linux |
Kernel |
2.24.2-1 |
2.24.2-1 |
References