CVE-2025-31160

Published: Mar 26, 2025Modified: Jun 17, 2026Deferred

2.9

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 1.4 / Impact: 1.4

Source: MITRE (Secondary)

Description

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (11)

https://blog.bismuth.sh/blog/bismuth-found-the-atop-bug

Source: cve@mitre.org

https://github.com/Atoptool/atop

Source: cve@mitre.org

https://news.ycombinator.com/item?id=43477057

Source: cve@mitre.org

https://news.ycombinator.com/item?id=43485980

Source: cve@mitre.org

https://rachelbythebay.com/w/2025/03/26/atop/

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2025/03/26/3