High severity7.8NVD Advisory· Published Jun 13, 2026· Updated Aug 13, 2026
CVE-2026-54228
CVE-2026-54228
Description
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24- osv-coords22 versionspkg:rpm/almalinux/abrtpkg:rpm/almalinux/abrt-libspkg:rpm/almalinux/abrt-plugin-sosreportpkg:rpm/almalinux/abrt-console-notificationpkg:rpm/almalinux/python3-abrt-docpkg:rpm/almalinux/abrt-tuipkg:rpm/almalinux/python3-abrtpkg:rpm/almalinux/abrt-addon-vmcorepkg:rpm/almalinux/abrt-dbuspkg:rpm/almalinux/python3-abrt-container-addonpkg:rpm/almalinux/abrt-addon-ccpppkg:rpm/almalinux/abrt-addon-pstoreoopspkg:rpm/almalinux/abrt-desktoppkg:rpm/almalinux/python3-abrt-addonpkg:rpm/almalinux/abrt-addon-coredump-helperpkg:rpm/almalinux/abrt-addon-kerneloopspkg:rpm/almalinux/abrt-guipkg:rpm/almalinux/abrt-gui-libspkg:rpm/almalinux/abrt-plugin-machine-idpkg:rpm/almalinux/abrt-addon-xorgpkg:rpm/almalinux/abrt-clipkg:rpm/almalinux/abrt-cli-ng
< 2.10.9-26.el8_10.alma.1+ 21 more
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
Patches
Vulnerability mechanics
References
8- access.redhat.com/errata/RHSA-2026:48819nvd
- access.redhat.com/errata/RHSA-2026:48864nvd
- access.redhat.com/errata/RHSA-2026:48865nvd
- access.redhat.com/errata/RHSA-2026:48866nvd
- access.redhat.com/errata/RHSA-2026:54272nvd
- access.redhat.com/security/cve/CVE-2026-54228nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54228.jsonnvd
News mentions
0No linked articles in our index yet.