Nimbuspwn: Leveraging vulnerabilities to exploit Linux via Privilege Escalation

Elastic Security summarizes Microsoft’s disclosure of “Nimbuspwn,” a set of local privilege-escalation vulnerabilities in networkd-dispatcher that enable adversaries with shell access to escalate privileges on affected Linux hosts; the report describes impacted versions, detection queries (OSQuery and Elastic EQL) to identify vulnerable or suspicious activity, and recommends applying the upstream patch and investigating hosts running networkd-dispatcher.