Critical Authentication Bypass Vulnerability in Ubuntu's Booth Component

• •Critical authentication bypass vulnerability in Ubuntu's Booth component.
• •Remote attackers can exploit the flaw to gain unintended access to network services.
• •Users must update to specific package versions and restart Booth to mitigate risks.

A serious authentication bypass vulnerability has been discovered in the Booth component of Ubuntu, affecting versions 18.04, 20.04, 22.04, and 24.04 LTS. The flaw arises from improper validation of message authentication codes, potentially allowing remote attackers to bypass authentication and gain unintended access to network services. CISA has confirmed the exploitation of this flaw, prompting urgent advisories for system updates. Users are advised to update their systems to the specified package versions to mitigate the risk. Affected users should restart Booth after applying the updates to ensure all changes take effect. Ubuntu Pro users have access to long-term security coverage for the affected packages. The vulnerability is cataloged under USN-8832-1, with specific package versions provided for each Ubuntu LTS release. Immediate action is recommended to prevent unauthorized access.