High severity7.4NVD Advisory· Published Apr 3, 2026· Updated Jul 24, 2026
CVE-2026-35535
CVE-2026-35535
Description
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
27(expand)+ 5 more
- (no CPE)
- cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*range: <1.9.17
- cpe:2.3:a:sudo_project:sudo:1.9.17:-:*:*:*:*:*:*
- cpe:2.3:a:sudo_project:sudo:1.9.17:p1:*:*:*:*:*:*
- cpe:2.3:a:sudo_project:sudo:1.9.17:p2:*:*:*:*:*:*
- (no CPE)range: <=1.9.17p2
- osv-coords20 versionspkg:rpm/almalinux/sudopkg:rpm/almalinux/sudo-python-pluginpkg:rpm/opensuse/sudo&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/sudo&distro=openSUSE%20Tumbleweedpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/sudo&distro=SUSE%20Linux%20Micro%206.2
< 1.9.15-10.p5.el10_1+ 19 more
- (no CPE)range: < 1.9.15-10.p5.el10_1
- (no CPE)range: < 1.9.15-10.p5.el10_1
- (no CPE)range: < 1.9.17p1-160000.3.1
- (no CPE)range: < 1.9.17p2-2.1
- (no CPE)range: < 1.9.9-150400.4.42.1
- (no CPE)range: < 1.9.9-150400.4.42.1
- (no CPE)range: < 1.9.12p1-150500.7.16.1
- (no CPE)range: < 1.9.12p1-150500.7.16.1
- (no CPE)range: < 1.9.9-150400.4.42.1
- (no CPE)range: < 1.9.9-150400.4.42.1
- (no CPE)range: < 1.9.12p1-150500.7.16.1
- (no CPE)range: < 1.9.15p5-150600.3.15.1
- (no CPE)range: < 1.9.9-150400.4.42.1
- (no CPE)range: < 1.9.12p1-150500.7.16.1
- (no CPE)range: < 1.9.15p5-150600.3.15.1
- (no CPE)range: < 1.9.9-150400.4.42.1
- (no CPE)range: < 1.9.12p1-150500.7.16.1
- (no CPE)range: < 1.9.15p5-150600.3.15.1
- (no CPE)range: < 1.9.15p5-slfo.1.1_3.1
- (no CPE)range: < 1.9.17p1-160000.3.1
Patches
Vulnerability mechanics
References
33- github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69nvdPatch
- cert-portal.siemens.com/productcert/html/ssa-253495.htmlnvdThird Party Advisory
- www.qualys.com/2026/03/10/crack-armor.txtnvdThird Party Advisory
- bugs.debian.org/1130593nvdBroken Link
- bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042nvdIssue Tracking
- access.redhat.com/errata/RHSA-2026:10758nvd
- access.redhat.com/errata/RHSA-2026:11521nvd
- access.redhat.com/errata/RHSA-2026:12310nvd
- access.redhat.com/errata/RHSA-2026:13731nvd
- access.redhat.com/errata/RHSA-2026:13888nvd
- access.redhat.com/errata/RHSA-2026:13889nvd
- access.redhat.com/errata/RHSA-2026:13891nvd
- access.redhat.com/errata/RHSA-2026:13892nvd
- access.redhat.com/errata/RHSA-2026:13895nvd
- access.redhat.com/errata/RHSA-2026:13896nvd
- access.redhat.com/errata/RHSA-2026:14228nvd
- access.redhat.com/errata/RHSA-2026:14437nvd
- access.redhat.com/errata/RHSA-2026:19067nvd
- access.redhat.com/errata/RHSA-2026:19220nvd
- access.redhat.com/errata/RHSA-2026:20040nvd
- access.redhat.com/errata/RHSA-2026:20087nvd
- access.redhat.com/errata/RHSA-2026:21275nvd
- access.redhat.com/errata/RHSA-2026:21656nvd
- access.redhat.com/errata/RHSA-2026:21690nvd
- access.redhat.com/errata/RHSA-2026:21695nvd
- access.redhat.com/errata/RHSA-2026:23233nvd
- access.redhat.com/errata/RHSA-2026:28887nvd
- access.redhat.com/errata/RHSA-2026:30088nvd
- access.redhat.com/errata/RHSA-2026:34098nvd
- access.redhat.com/security/cve/CVE-2026-35535nvd
- bugzilla.redhat.com/show_bug.cginvd
- lists.debian.org/debian-lts-announce/2026/06/msg00003.htmlnvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.jsonnvd
News mentions
2- Debian 13.5 point release lands with security fixes, bug patchesHelp Net Security · May 17, 2026
- Siemens SINEC OSCISA ICS Advisories