Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-12744 enables local privilege escalation in Fedora 43 and below via ABRT daemon socket manipulation. Exploit chains multiple stages to escape systemd sandbox and gain root access. #DFIR_Radar https://t.co/6XLCLYmlM6
Post summary
The tweet discloses details of CVE‑2025‑12744, outlining its impact and exploitation vector, but does not provide a PoC, exploit code, or evidence of active attacks.