seatd-launch in seatd 0.6.x prior to 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname.
Debian Bug report logs -
#1006308
seatd-launch: CVE-2022-25643
Package:
src:seatd;
Maintainer for src:seatd is Mark Hindley <leepen@debianorg>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Wed, 23 Feb 2022 07:30:01 UTC
Severity: grave
Tags: security, upstream
Found in version seatd/063-2
Fixed in v ...
Vulmon