CVE-2019-19882

CVE-2019-19882 is a local privilege escalation vulnerability in shadow 4.8, affecting distributions like Gentoo, Arch Linux, and Void Linux under specific compilation configurations. It allows unprivileged local users to gain root access through misconfigured setuid account management tools (e.g., useradd, groupadd). The vulnerability has a CVSS score of 7.8 (High), indicating a low attack complexity and significant impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.