CVE-2011-1946: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path u...

Security readout for executives and security teams

This is a local privilege-escalation flaw in libgnomesu 1.0.0. A backend component could report setuid or setgid failure but continue as though no error occurred. The sources say a local user could gain privileges by using access to two unprivileged accounts and high process volume. Exposure is most likely on legacy Linux systems that still ship or run libgnomesu 1.0.0 with gnomesu-pam-backend. The bundle does not identify supported distributions, package names beyond libgnomesu, or later affected versions. Treat this as a legacy privilege-escalation cleanup item with elevated priority on shared systems. It is not described as remotely exploitable or actively exploited, but successful abuse could turn limited local access into higher privileges. Mitigation focus: Inventory systems for libgnomesu 1.0.0 and gnomesu-pam-backend.; Check vendor or distribution advisories for fixed packages or removal guidance.; Remove or disable libgnomesu where it is unnecessary..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.