The Automatic Bug Reporting Tool (ABRT) in Red Hat Enterprise Linux 8.4 contains two vulnerabilities: CVE-2026-54228 is a TOCTOU race condition in the abrt-dbus SetElement function that permits arbitrary file writes to dump directories, and CVE-2026-54229 is a locking issue where ChownProblemDir succeeds during active post-create event processing due to inadequate locking. Both vulnerabilities relate to concurrency control weaknesses (CWE-367 and CWE-362) that could be exploited to write or modify files improperly. Red Hat has issued security updates for these issues in the abrt package for Red Hat Enterprise Linux 8.4 Extended Life Cycle and Advanced Update Support. The advisory references updated packages and provides instructions for applying the fixes.

These vulnerabilities allow an attacker to exploit race conditions and inadequate locking mechanisms within ABRT to perform arbitrary file writes in dump directories. This could lead to unauthorized modification or creation of files, potentially impacting system integrity or stability. The advisory rates the security impact as Important, indicating a high severity but not critical. There are no known exploits in the wild at the time of publication.

Red Hat has released official security updates for ABRT in Red Hat Enterprise Linux 8.4 that address these vulnerabilities. Users should apply the provided patches as detailed in the Red Hat advisory RHSA-2026:48865 and the referenced update article (https://access.redhat.com/articles/11258). Since this is an official fix, applying the update fully mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor.