| Package | Affected versions | Patched versions |
|---|---|---|
| gnome-shell | < 3.32.2 | 3.32.2 |
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free