CVE-2020-36657

CVE-2020-36657 affects uptimed on Gentoo prior to 0.4.6-r1. Local users can escalate to root by creating a hard link in /var/spool/uptimed due to an unsafe chown -R call in the package’s maintenance flow. The vulnerability is documented across multiple sources (NVD entry for CVE-2020-36657; Gento...