CVE-2026-54229
Fixed in a distro release EPSS <1%CVSS 7.0
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.
Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 6
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | abrt | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-addon-ccpp | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-addon-coredump-helper | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-addon-kerneloops | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-addon-pstoreoops | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-addon-vmcore | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-addon-xorg | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-cli | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-cli-ng | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-console-notification | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-dbus | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-desktop | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-gui | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-gui-libs | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-libs | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-plugin-machine-id | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-plugin-sosreport | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | abrt-tui | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | python3-abrt | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | python3-abrt-addon | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | python3-abrt-container-addon | 2.10.9-26.el8_10.alma.1 |
| AlmaLinux 8 | python3-abrt-doc | 2.10.9-26.el8_10.alma.1 |
| Red Hat Enterprise Linux 8 | abrt | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-ccpp | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-ccpp-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-coredump-helper | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-coredump-helper-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-kerneloops | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-kerneloops-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-pstoreoops | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-pstoreoops-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-upload-watch-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-vmcore | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-xorg | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-addon-xorg-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-atomic-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-cli | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-cli-ng | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-console-notification | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-dbus | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-dbus-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-debugsource | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-desktop | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-gui | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-gui-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-gui-libs | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-gui-libs-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-libs | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-libs-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-plugin-machine-id | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-plugin-sosreport | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-retrace-client-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-tui | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | abrt-tui-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | python3-abrt | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | python3-abrt-addon | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | python3-abrt-container-addon | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | python3-abrt-debuginfo | 0:2.10.9-26.el8_10 |
| Red Hat Enterprise Linux 8 | python3-abrt-doc | 0:2.10.9-26.el8_10 |
| Red Hat rhel aus 8.4 | abrt-dbus | 0:2.10.9-25.el8_4.1 |
| Red Hat rhel aus 8.6 | abrt-dbus | 0:2.10.9-25.el8_6.1 |
| Red Hat rhel e4s 8.8 | abrt-dbus | 0:2.10.9-25.el8_8.1 |
| Red Hat rhel els 7 | abrt-dbus | 0:2.1.11-61.el7_9 |
| Red Hat rhel eus long life 8.4 | abrt-dbus | 0:2.10.9-25.el8_4.1 |
| Red Hat rhel eus long life 8.6 | abrt-dbus | 0:2.10.9-25.el8_6.1 |
| Red Hat rhel tus 8.8 | abrt-dbus | 0:2.10.9-25.el8_8.1 |
| Rocky Linux 8 | abrt | 0:2.10.9-26.el8_10.rocky.0.1 |