Към съдържанието
Търсене

CVE-2026-4878: Red Hat Enterprise Linux 10, състезание за ресурс

6.7

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, при специфични условия, с обикновен потребителски вход и след действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.

Засегнати продукти

  • Red Hat Red Hat Enterprise Linux 10: 0:2.69-7.el10_1.1 преди *
  • Red Hat Red Hat Enterprise Linux 10: 0:2.69-7.el10_2.1 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:2.69-7.el10_0.1 преди *
  • Red Hat Red Hat Enterprise Linux 8: 0:2.48-6.el8_10.1 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:2.48-4.el8_6.1 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:2.48-4.el8_6.1 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:2.48-5.el8_8.1 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:2.48-5.el8_8.1 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:2.48-10.el9_7.1 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:2.48-10.el9_8.1 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:2.48-10.el9_7.1 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:2.48-10.el9_8.1 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:2.48-9.el9_2.1 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: 0:2.48-9.el9_4.1 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:2.48-9.el9_6.1 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202608241157-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.13: 413.92.202606160406-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.14: 414.92.202606231112-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.15: 415.92.202606030318-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 416.94.202606051757-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 417.94.202606250942-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.18: 418.94.202606051320-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 4.19.9.6.202606031700-0 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791371080 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791371069 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791788287 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791970484 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459707 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459711 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459759 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1789029076 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791966259 преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790598593 преди *
  • Red Hat Cost Management 4: 1780946239 преди *
  • Red Hat Cost Management 4: 1783539156 преди *
  • Red Hat Red Hat AI Inference Server 3.2: 1780681984 преди *
  • Red Hat Red Hat AI Inference Server 3.3: 1782352950 преди *
  • Red Hat Red Hat AI Inference Server 3.3: 1782352919 преди *
  • Red Hat Red Hat AI Inference Server 3.3: 1782353093 преди *
  • Red Hat Red Hat AI Inference Server 3.3: 1782352847 преди *
  • Red Hat Red Hat Discovery 2: 1778101579 преди *
  • Red Hat Red Hat Discovery 2: 1778156756 преди *
  • Red Hat Red Hat Discovery 2: 1782159791 преди *
  • Red Hat Red Hat Discovery 2: 1782166952 преди *
  • Red Hat Red Hat Hardened Images: 2.78-1.1.hum1 преди *
  • Red Hat Red Hat Insights proxy 1.5: 1780420428 преди *
  • Red Hat Red Hat OpenShift AI 3.4: 1790703542 преди *
  • Red Hat Red Hat OpenShift distributed tracing 3.9.3: 1778056267 преди *
  • Red Hat Red Hat OpenShift distributed tracing 3.9.3: 1778056233 преди *
  • Red Hat Red Hat OpenShift distributed tracing 3.9.3: 1778056245 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1779798159 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1779798164 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1779798165 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1779798222 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1787241211 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1787135742 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1787241260 преди *
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat OpenShift Container Platform 4

Вид слабост

История

  • 9 април 2026 Публикувано

Други уязвимости в Red Hat Red Hat Enterprise Linux 10

Първоизточници

CVE-2026-4878: Red Hat Enterprise Linux 10, състезание за ресурс | freedomonline.bg