CVE-2021-23240: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified
• Sudo Project Sudo: before 1.8.32 (fixed in 1.8.32); from 1.9.0, before 1.9.5 (fixed in 1.9.5)

Published 2021-01-12. Last modified 2026-06-17.