SecuriTricks - CVE-2025-31160

Description

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.

Product(s) Impacted

Vendor	Product	Versions
Atop	Atop	<2.11.0

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	atop	atop	<2.11.0	/	/	/	/	/	/	/

References

https://github.com/Atoptool/atop

https://news.ycombinator.com/item?id=43477057

https://news.ycombinator.com/item?id=43485980

https://rachelbythebay.com/w/2025/03/26/atop/

http://www.openwall.com/lists/oss-security/2025/03/26/3

http://www.openwall.com/lists/oss-security/2025/03/27/1

http://www.openwall.com/lists/oss-security/2025/03/27/2

http://www.openwall.com/lists/oss-security/2025/03/27/3

CVSS Score

2.9 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: HIGH
Privileges Required: NONE
Scope: UNCHANGED
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

View Vector String

Timeline

Published: March 26, 2025, 9:15 p.m.
Last Modified: March 27, 2025, 4:45 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

CVE-2025-31160