Sudo Chroot Privilege Escalation

A privilege escalation vulnerability in Sudo that leverages the chroot functionality to escape restricted environments and gain root access.

## Vulnerability Overview
Sudo versions before 1.9.16 contain a flaw in the chroot handling logic that allows a user with limited sudo privileges to escalate to full root access. The vulnerability exploits a race condition in the chroot setup process, allowing the attacker to escape the chroot jail and execute commands as root in the real filesystem.

## Technical Details
- **Type:** Privilege Escalation via chroot escape (CWE-269)
- **Root Cause:** When sudo is configured with ChrootDir, the chroot is established before dropping privileges. However, a TOCTOU (time-of-check-time-of-use) race condition exists that allows the attacker to modify the chroot directory structure between the security check and the actual chroot call.
- **Prerequisites:** User must have at least one sudo-allowed command with ChrootDir configured.

## Impact
- Local privilege escalation from limited user to root
- Complete system compromise
- Bypass of sudo restrictions and audit logging

## Affected Versions
- Sudo 1.9.0 through 1.9.15p5
- All major Linux distributions shipping vulnerable sudo versions