KPMCore: Root privilege escalation

Background

KPMcore, the KDE Partition Manager core, is a library for examining and modifying partitions, disk devices, and filesystems on a Linux system. It provides a unified programming interface over top of (external) system-manipulation tools.

Description

Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab.

Impact

An attacker could esclate privileges to root by exploiting this vulnerability.

Workaround

There is no known workaround at this time.

Resolution

All KPMCore users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-libs/kpmcore-4.2.0"