CVE-2025-31160 Denial of service in atop
Local users can cause denial of service in atop by running specific processes while another user executes the tool.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-31160?
CVE-2025-31160 is a low-severity denial of service vulnerability in atop, published on 26 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.
Weakness: CWE-617
Which versions are affected by CVE-2025-31160?
Linux distribution packages (1)
atop openSUSE:Tumbleweed | All versions | 2.11.1-1.1 |
How do I fix CVE-2025-31160?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-31160 being exploited?
There is no known exploitation of CVE-2025-31160 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2025-31160, AZL-59270, AZL-59278, DEBIAN-CVE-2025-31160, DLA-4117-1, DSA-5892-1 and 4 more.