CVE-2024-28085

util-linux versions prior to 2.40

The wall command in util-linux versions through 2.40 does not properly filter escape sequences received from command line arguments. This allows a local attacker to potentially inject escape sequences, which could lead to information disclosure or, in some scenarios, account takeover. The vulnerability has been present for over 11 years. A fix was initially released but did not fully address the issue, leading to a subsequent update that removes the setgid permission bit from the wall and write utilities.

Upgrade to util-linux version 2.40 or later. Remove the setgid permission bit from the wall and write utilities. Consider disabling the wall command.