Microsoft Azure AD SSH Login Extension for Linux Privilege Escalation Vulnerability

A vulnerability in the Azure AD SSH Login extension for Linux has been identified, allowing unauthorized attackers to elevate privileges locally. This issue arises from the external initialization of trusted variables or data stores in Azure Entra ID.

Impact

Exploitation of this vulnerability allows an unprivileged local user on an affected Azure Linux VM to gain root privileges.

Remediation

To address this vulnerability, users can update the Azure AD SSH Login extension for Linux using their distribution's package manager. Systems with the extension already installed have packages.microsoft.com configured automatically. Users should run 'sudo apt update aadsshlogin' for Ubuntu or Debian, 'sudo dnf update aadsshlogin' for RHEL-based distributions, or 'sudo zypper update aadsshlogin' for SUSE-based distributions.