CVE-2026-73584
No fix known EPSS <1%CVSS 6.3
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.
Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | sblim-sfcb | no fix |
| Ubuntu 18.04 LTS | sblim-sfcb | no fix |
| Ubuntu 20.04 LTS | sblim-sfcb | no fix |
| Ubuntu 22.04 LTS | sblim-sfcb | no fix |
| Ubuntu 24.04 LTS | sblim-sfcb | no fix |
| Ubuntu 26.04 LTS | sblim-sfcb | no fix |