CVE-2026-73584 is a race condition vulnerability (CWE-377) in sblim-sfcb's privileged instance migration process. A local low-privileged attacker can exploit insecure temporary file handling by repeatedly recreating a symbolic link in /tmp to redirect privileged output to arbitrary files. This can lead to privileged file corruption or denial of service. The vulnerability requires the sfcbrepos instance migration feature to be enabled with specific repository content. The attack complexity is high, limiting exploitation scope. Red Hat's advisory confirms the issue and recommends mitigation by disabling the vulnerable migration path using the '-i' option or avoiding elevated privilege execution of sfcbrepos when untrusted users can write to /tmp. No official patch is currently referenced in the advisory.

Successful exploitation can result in privileged file corruption or denial of service on the affected system. Confidentiality is not impacted, but integrity and availability are highly impacted. The attack requires local access with low privileges and has high attack complexity due to the race condition nature and specific preconditions.

Red Hat advises mitigating this vulnerability by disabling the vulnerable instance migration path if it is not required. This can be done by running 'sfcbrepos' with the '-i' option (e.g., 'sudo sfcbrepos -f -i'). Alternatively, avoid running 'sfcbrepos' with elevated privileges on systems where untrusted local users can write to the /tmp directory. A service restart or reload may be necessary if 'sfcbrepos' is managed by a service. No official patch or update is currently available; patch status is not yet confirmed—check the vendor advisory for updates.