CyberRota Analysis
AI-GeneratedA vulnerability in AccountsService on Ubuntu allows local users to exploit improperly managed privileges when launching language helper scripts. This flaw permits a shell spawned by these scripts to inherit root privileges, potentially leading to local privilege escalation. Ubuntu system administrators and users with access to AccountsService should prioritize patching to mitigate this high-severity risk.
Original NVD Description
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation.