CVE-2021-43411

CVE-2021-43411 describes a time-of-check-to-time-of-use (TOCTOU) vulnerability in GNU Hurd before version 0.9 20210404-9. This flaw allows a local attacker to gain full root access by exploiting a window where a setuid executable has elevated privileges but still references the old, accessible process. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with high attack complexity and low privileges required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.