Upstream information

CVE-2026-54230 at MITRE

Description

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v3 Scores
CVSS detail CNA (0b0ca135-0b70-47e7-9f44-1890c2a1c46c) CNA (Red Hat) National Vulnerability Database
Base Score 7 7 7.8
Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local Local Local
Attack Complexity High High Low
Privileges Required Low Low Low
User Interaction None None None
Scope Unchanged Unchanged Unchanged
Confidentiality Impact High High High
Integrity Impact High High High
Availability Impact High High High
CVSSv3 Version 3.1 3.1 3.1
No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Liberty Linux 8
  • abrt >= 2.10.9-26.el8_10
  • abrt-addon-ccpp >= 2.10.9-26.el8_10
  • abrt-addon-coredump-helper >= 2.10.9-26.el8_10
  • abrt-addon-kerneloops >= 2.10.9-26.el8_10
  • abrt-addon-pstoreoops >= 2.10.9-26.el8_10
  • abrt-addon-vmcore >= 2.10.9-26.el8_10
  • abrt-addon-xorg >= 2.10.9-26.el8_10
  • abrt-cli >= 2.10.9-26.el8_10
  • abrt-cli-ng >= 2.10.9-26.el8_10
  • abrt-console-notification >= 2.10.9-26.el8_10
  • abrt-dbus >= 2.10.9-26.el8_10
  • abrt-desktop >= 2.10.9-26.el8_10
  • abrt-gui >= 2.10.9-26.el8_10
  • abrt-gui-libs >= 2.10.9-26.el8_10
  • abrt-libs >= 2.10.9-26.el8_10
  • abrt-plugin-machine-id >= 2.10.9-26.el8_10
  • abrt-plugin-sosreport >= 2.10.9-26.el8_10
  • abrt-tui >= 2.10.9-26.el8_10
  • python3-abrt >= 2.10.9-26.el8_10
  • python3-abrt-addon >= 2.10.9-26.el8_10
  • python3-abrt-container-addon >= 2.10.9-26.el8_10
  • python3-abrt-doc >= 2.10.9-26.el8_10
 Patchnames:
RHSA-2026:54272 (i686,x86_64)

SUSE Timeline for this CVE

CVE page created: Fri Aug 28 14:51:09 2026
CVE page last modified: Fri Sep 4 11:40:34 2026