CVE-2024-48992

CVE-2024-48992 describes a local privilege escalation vulnerability in needrestart, affecting versions prior to 3.8. An attacker can execute arbitrary code as root by manipulating the RUBYLIB environment variable, tricking needrestart into running the Ruby interpreter with attacker-controlled code. This vulnerability carries a CVSS score of 7.8 (High), indicating a low attack complexity and requiring local access, but leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, including reports of its impact on Ubuntu Linux.