CVE-2025-32463

LLM-synthesized narrative grounded in this CVE's description and references.

• Sudo Project/Sudo4 versions

  cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*range: >=1.9.14,<1.9.17
  • cpe:2.3:a:sudo_project:sudo:1.9.17:-:*:*:*:*:*:*
  • (no CPE)range: <1.9.17p1
  • (no CPE)range: 1.9.14
• Canonical/Ubuntu Linux4 versions

  cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*+ 3 more

  • cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:24.10:*:*:*:-:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:25.04:*:*:*:-:*:*:*
• Debian/linux3 versions

  cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:13.0:*:*:*:*:*:*:*
• OpenSUSE/Leap

  cpe:2.3:o:opensuse:leap:15.6:*:*:*:*:*:*:*
• Red Hat/Enterprise Linux Server

  cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
• SUSE S.A./Linux Enterprise Desktop2 versions

  cpe:2.3:o:suse:linux_enterprise_desktop:15:sp6:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:suse:linux_enterprise_desktop:15:sp6:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:15:sp7:*:*:*:*:*:*
• SUSE S.A./Linux Enterprise Real Time Extension3 versions

  cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:*:*:*:*:*:*+ 2 more

  • cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp6:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp7:*:*:*:*:*:*
• SUSE S.A./Linux Enterprise For Sap2 versions

  cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:sp6:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:sp6:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:sp7:*:*:*:*:*:*
• osv-coords16 versions

  pkg:apk/chainguard/sudopkg:apk/chainguard/sudo-devpkg:apk/chainguard/sudo-docpkg:apk/chainguard/sudo-doc-extrapkg:apk/wolfi/sudopkg:apk/wolfi/sudo-devpkg:apk/wolfi/sudo-docpkg:apk/wolfi/sudo-doc-extrapkg:rpm/almalinux/sudopkg:rpm/almalinux/sudo-python-pluginpkg:rpm/opensuse/sudo&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/sudo&distro=openSUSE%20Tumbleweedpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Micro%206.1

  < 1.9.17-r0+ 15 more

  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.17-r0
  • (no CPE)range: < 1.9.15-8.p5.el10_0.2
  • (no CPE)range: < 1.9.15-8.p5.el10_0.2
  • (no CPE)range: < 1.9.15p5-150600.3.9.1
  • (no CPE)range: < 1.9.17p1-1.1
  • (no CPE)range: < 1.9.15p5-150600.3.9.1
  • (no CPE)range: < 1.9.15p5-150600.3.9.1
  • (no CPE)range: < 1.9.15p5-2.1
  • (no CPE)range: < 1.9.15p5-slfo.1.1_2.1

• www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/nvdExploitThird Party Advisory
• www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chrootnvdExploitThird Party Advisory
• access.redhat.com/security/cve/cve-2025-32463nvdThird Party Advisory
• bugs.gentoo.org/show_bug.cginvdIssue TrackingThird Party Advisory
• explore.alas.aws.amazon.com/CVE-2025-32463.htmlnvdThird Party Advisory
• iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/nvdThird Party Advisory
• security-tracker.debian.org/tracker/CVE-2025-32463nvdThird Party Advisory
• ubuntu.com/security/notices/USN-7604-1nvdThird Party Advisory
• www.openwall.com/lists/oss-security/2025/06/30/3nvdThird Party Advisory
• www.sudo.ws/security/advisories/nvdVendor Advisory
• www.sudo.ws/security/advisories/chroot_bug/nvdVendor Advisory
• www.suse.com/security/cve/CVE-2025-32463.htmlnvdThird Party Advisory
• www.suse.com/support/update/announcement/2025/suse-su-202502177-1/nvdThird Party Advisory
• www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerabilitynvdThird Party Advisory
• www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerabilitynvdMitigationThird Party Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
• www.sudo.ws/releases/changelog/nvdRelease Notes

• What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
  Securelist · May 29, 2026