CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor

published April 3, 2022

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

⚠️ A pesky crash could grant full access! The swaylock application before version 1.6 has a vulnerability that lets attackers unlock your Wayland compositor with a simple exploit. 🔥 Think of swaylock as a theater's security, and this vulnerability is like someone triggering a fire alarm just to stroll in unnoticed. Once the chaos begins, they can sneak past security while everyone's distracted! If exploited, an attacker could cause swaylock to crash, resulting in an unlocked compositor — giving them potentially unrestricted access to your system. This could lead to unauthorized data manipulation or pilfering, which is absolutely devastating!

Put simply

Think of swaylock as a theater's security, and this vulnerability is like someone triggering a fire alarm just to stroll in unnoticed. Once the chaos begins, they can sneak past security while everyone's distracted! This vulnerability allows attackers to trigger a crash in swaylock, the screen locker for Wayland, potentially allowing unauthorized access to the compositor’s resources without proper authentication.

What to do

If exploited, an attacker could cause swaylock to crash, resulting in an unlocked compositor — giving them potentially unrestricted access to your system. This could lead to unauthorized data manipulation or pilfering, which is absolutely devastating! To protect yourself, upgrade swaylock to version 1.6 or newer as soon as possible. Regularly audit your system for out-of-date software to minimize exposure to vulnerabilities. You can handle this! Patch swaylock, and you'll be back in control of your system in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01555 · 75.0th percentile
Published
2022-04-03T22:11Z
EPSS history
Timeline
  • 03 APR 22:11Z
    swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor
    cvelistv5