This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-61897 →
UBUNTU-CVE-2026-61897
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It chang...
Original description
The description as published by the source.
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned by a helper script inherits ruid=0 and may reset its effective UID to root, enabling local privilege escalation.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Ubuntu:Pro:14.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.35-0ubuntu7.3+esm4"}]}]
Ubuntu:Pro:16.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.40-2ubuntu11.6+esm2"}]}]
Ubuntu:Pro:18.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.45-1ubuntu1.3+esm2"}]}]
Ubuntu:Pro:20.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.55-0ubuntu12~20.04.7+esm1"}]}]
Ubuntu:22.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.07.5-2ubuntu1.6"}]}]
Ubuntu:24.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.13.9-2ubuntu6.1"}]}]
Ubuntu:26.04:LTS
accountsservice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.13.9-8ubuntu5.2"}]}]
References
- advisory ubuntu.com
- advisory ubuntu.com
- report ubuntu.com
- report cve.org