This vulnerability involves a race condition in the abrt-dbus D-Bus service's ChownProblemDir method on Red Hat Enterprise Linux 6. The method opens the dump directory with read-only flags and calls dd_chown to change ownership of all files to the caller's user ID. This operation succeeds even when post-create event handlers hold a write lock, leading to improper synchronization. As a result, an attacker with low privileges can gain control over the dump directory at the filesystem level while privileged scripts are executing, potentially leading to confidentiality, integrity, and availability impacts.

An attacker with low privileges can exploit this race condition to gain filesystem-level control over the dump directory during execution of privileged event scripts. This can lead to full confidentiality, integrity, and availability impacts on the affected system components related to the dump directory and its contents.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-54229 for current remediation guidance. No official fix or workaround is explicitly stated in the provided advisory content. Users should monitor Red Hat's advisory for updates and apply patches once available.