Critical Privilege Escalation Vulnerability in Pardus Linux Discovered

A critical privilege escalation vulnerability chain, tracked as CVE-2026-5140, has been identified in the Pardus Linux update mechanism. This flaw allows local users to gain full root access without authentication, posing a significant risk to systems using the pardus-update package. The vulnerability, rated CVSS 9.3 (Critical), results from a combination of three distinct flaws that can be exploited within seconds. Pardus Linux, maintained by TÜBİTAK, is widely used in government institutions and educational environments, making the impact potentially extensive. As of now, no patches have been mentioned in the articles, and the vulnerability remains unaddressed.

Key Points: • CVE-2026-5140 allows local users to gain root access on Pardus Linux systems. • The vulnerability is rated CVSS 9.3, indicating a critical threat level. • Pardus Linux is commonly deployed in sensitive environments like government and education.