The Linux community narrowly avoided a security disaster after a lone software engineer accidentally uncovered a backdoor that was about to be added to major Linux operating systems. 

Last Friday, Microsoft software engineer Andres Freund noticed the backdoor in XZ Utils, an open-source set of data-compression tools widely used across Linux and Unix-like operating systems. 

Freund said he discovered the backdoor by chance while benchmarking a Linux-based Debian installation. During the tests, he realized that XZ Utils was triggering high CPU consumption with SSH processes, the security protocol for logging into a remote server. This led him to realize that a component within XZ Utils can inject unauthorized code into a Linux installation to spy on the user's computer and execute additional malicious code, according to security researchers.  

In response, Linux OS providers Red Hat and Debian have issued security advisories warning users about the threat. But in some good news, the stable versions of Red Hat Linux and Debian never incorporated the malicious XZ Utils components. Instead, the backdoor only made its way to the Red Hat Fedora 40 beta and Fedora Rawhide, along with experimental distributions for Debian. Any affected users should immediately downgrade their XZ Utils version.

"Specifically, this code is present in versions 5.6.0 and 5.6.1 of the (XZ) libraries," Red Hat says.

Meanwhile, US cyber authorities are urging affected users to "downgrade XZ Utils to an uncompromised version—such as XZ Utils 5.4.6 Stable" and hunt for any malicious activity.