CVE-2026-54228

EUVD-2026-36637
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
TOCTOU
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.25%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:2.1.11-61.el7_9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:2.10.9-25.el8_4.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:2.10.9-25.el8_4.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:2.10.9-25.el8_6.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
0:2.10.9-25.el8_6.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:2.10.9-25.el8_8.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:2.10.9-25.el8_8.1 ≤
𝑥
< *
ADP
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
abrt
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-addon-ccpp
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-addon-coredump-helper
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-addon-kerneloops
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-addon-pstoreoops
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-addon-vmcore
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-addon-xorg
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-cli
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-cli-ng
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-console-notification
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-dbus
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-desktop
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-gui
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-gui-libs
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-libs
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-plugin-machine-id
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-plugin-sosreport
RHEL 8
0:2.10.9-26.el8_10
fixed
abrt-tui
RHEL 8
0:2.10.9-26.el8_10
fixed
python3-abrt
RHEL 8
0:2.10.9-26.el8_10
fixed
python3-abrt-addon
RHEL 8
0:2.10.9-26.el8_10
fixed
python3-abrt-container-addon
RHEL 8
0:2.10.9-26.el8_10
fixed
python3-abrt-doc
RHEL 8
0:2.10.9-26.el8_10
fixed