CVE-2026-109969: Missing Authentication for Critical Function in Red Hat Red Hat Enterprise Linux 10

The vulnerability in Red Hat Enterprise Linux 10 involves the clevis-pkcs11-afunix-socket-unlock daemon creating AF_UNIX sockets lacking explicit permission restrictions and peer credential verification. This flaw permits local users, when the process umask is permissive, to connect to the control socket to inject arbitrary device/key pairs or to the data socket to receive LUKS passphrases. The issue affects the clevis PKCS#11 pin functionality and compromises the confidentiality of LUKS passphrases.

The vulnerability allows local users to bypass authentication controls on critical functions related to device and key management in the clevis PKCS#11 pin daemon. This can lead to unauthorized injection of device/key pairs and exposure of LUKS passphrases, compromising data confidentiality. There is no indication of impact on integrity or availability. The attack requires local access and a permissive process umask setting.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-109969 for current remediation guidance. Until an official fix is available, restrict local user permissions and ensure process umask settings are not permissive to reduce risk of exploitation.