Vulnerabilities CVE-2026-54228

CVE-2026-54228

High

Open

TLP:CLEAR

Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.

Details

CVSS Score: 7.8
EPSS Score ⓘ: 0.10%

1.1th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jun 13, 2026
Last Modified: Aug 12, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.