High severity7.0NVD Advisory· Published Jun 13, 2026· Updated Aug 13, 2026
CVE-2026-54229
CVE-2026-54229
Description
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23- osv-coords22 versionspkg:rpm/almalinux/abrt-addon-pstoreoopspkg:rpm/almalinux/python3-abrtpkg:rpm/almalinux/abrt-plugin-sosreportpkg:rpm/almalinux/abrt-console-notificationpkg:rpm/almalinux/abrt-tuipkg:rpm/almalinux/abrt-addon-kerneloopspkg:rpm/almalinux/python3-abrt-addonpkg:rpm/almalinux/abrt-cli-ngpkg:rpm/almalinux/abrt-plugin-machine-idpkg:rpm/almalinux/python3-abrt-docpkg:rpm/almalinux/python3-abrt-container-addonpkg:rpm/almalinux/abrt-addon-xorgpkg:rpm/almalinux/abrt-gui-libspkg:rpm/almalinux/abrt-addon-coredump-helperpkg:rpm/almalinux/abrt-addon-ccpppkg:rpm/almalinux/abrt-addon-vmcorepkg:rpm/almalinux/abrt-clipkg:rpm/almalinux/abrtpkg:rpm/almalinux/abrt-libspkg:rpm/almalinux/abrt-dbuspkg:rpm/almalinux/abrt-desktoppkg:rpm/almalinux/abrt-gui
< 2.10.9-26.el8_10.alma.1+ 21 more
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
- (no CPE)range: < 2.10.9-26.el8_10.alma.1
Patches
Vulnerability mechanics
References
8- access.redhat.com/errata/RHSA-2026:48819nvd
- access.redhat.com/errata/RHSA-2026:48864nvd
- access.redhat.com/errata/RHSA-2026:48865nvd
- access.redhat.com/errata/RHSA-2026:48866nvd
- access.redhat.com/errata/RHSA-2026:54272nvd
- access.redhat.com/security/cve/CVE-2026-54229nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54229.jsonnvd
News mentions
0No linked articles in our index yet.