CVE-2026-54229 is a race condition in the Automatic Bug Reporting Tool (ABRT) abrt-dbus service, specifically in the ChownProblemDir method. The method opens the dump directory with read-only flags and calls dd_chown to change ownership of all files to the caller's user ID. Due to inadequate locking, this operation can succeed even while post-create event handlers hold a write lock, creating a time-of-check to time-of-use (TOCTOU) race condition. This allows an attacker with limited privileges to gain filesystem-level control over the dump directory while privileged event scripts are still running. Red Hat has issued security advisories and patches for affected Red Hat Enterprise Linux versions 8.6 and 8.8 to fix this vulnerability.

An attacker with low privileges can exploit this race condition to gain filesystem-level control over the dump directory used by ABRT. This could lead to unauthorized file ownership changes and potentially arbitrary file writes or modifications during the execution of privileged event scripts. The vulnerability impacts confidentiality, integrity, and availability, as reflected by the CVSS vector (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). No known exploits in the wild have been reported at this time.

Red Hat has released official security updates that fix this race condition vulnerability in the abrt-dbus service. Users of Red Hat Enterprise Linux 8.6 (Extended Life Cycle Long Life and AUS) and 8.8 (Update Services for SAP Solutions and Telecommunications Update Service) should apply the provided patches promptly. The advisories and update instructions are available at https://access.redhat.com/articles/11258. Applying these updates mitigates the vulnerability by correcting the locking mechanism in the ChownProblemDir method.