NEW LINUX FLAWS ALLOW PASSWORD HASH THEFT VIA CORE DUMPS IN UBUNTU, RHEL, FEDORA

Summary from the TLDR InfoSec newsletter

Two race condition vulnerabilities (CVE-2025-5054 and CVE-2025-4598) in Linux dump handlers enable local attackers to steal password hashes and sensitive data from crashed privileged processes. These flaws affect apport in Ubuntu and systemd-coredump in Red Hat and Fedora, allowing attackers to exploit SUID programs via timing attacks that replace crashed processes with malicious ones to access core dumps. Organizations can mitigate risk by disabling core dumps for SUID binaries with "echo 0 > /proc/sys/fs/suid_dumpable" until patches are applied.