PT-2025-13008 · Atop+3 · Atop+3

Published 2025-03-26 · Updated 2026-01-22 · CVE-2025-31160

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions atop versions prior to 2.11.0

Description The issue allows local users to cause a denial of service, such as an assertion failure and application exit, or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.

Recommendations For versions prior to 2.11.0, update to a version that includes the fix for this issue to prevent potential denial of service or other impacts. As a temporary workaround, consider restricting the use of atop to minimize the risk of exploitation.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALT-PU-2025-4990

ALT-PU-2025-4992

ALT-PU-2025-5233

AZL-59270

AZL-59278

BDU:2026-03454

CVE-2025-31160

DLA-4117-1

DSA-5892-1

MGASA-2025-0129

OPENSUSE-SU-2025:14945-1

Affected Products

Alt Linux

Debian

Red Os

Atop

References · 51

• https://osv.dev/vulnerability/DSA-5892-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4117-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14945-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-31160 · Security Note
• https://osv.dev/vulnerability/AZL-59270 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31160 · Security Note
• https://advisories.mageia.org/MGASA-2025-0129.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-31160 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-31160 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-31160 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31160 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-31160 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-59278 · Vendor Advisory