CVE-2026-112177: Incorrect Use of Privileged APIs in Red Hat Red Hat Enterprise Linux 10

This vulnerability arises from an incorrect use of privileged APIs in Ghostscript included in Red Hat Enterprise Linux 8 and 10. Specifically, the fix for CVE-2019-14869 was omitted during the rebase from Ghostscript version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. An attacker processing a specially crafted PostScript file may bypass the -dSAFER restrictions, which normally limit file access and command execution, thereby gaining unauthorized access to files outside permitted paths or executing commands with the permissions of the Ghostscript process.

Successful exploitation could allow an unauthenticated attacker to bypass Ghostscript's -dSAFER sandboxing restrictions, leading to unauthorized file access or command execution with the privileges of the Ghostscript process. This can result in information disclosure, integrity violations, and availability impacts on affected systems.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-112177 for current remediation guidance. Until an official fix is available, restrict processing of untrusted PostScript files and consider disabling Ghostscript where not required.