Threats Tagged 'cve-2026-16526'

CVE-2026-16524 is a command injection vulnerability in the Performance Co-Pilot (PCP) linux_sockets PMDA component of Red Hat Enterprise Linux. It allows a local attacker to execute arbitrary commands as the PMDA user by injecting malicious shell metacharacters via the network.persocket.filter metric. Exploitation requires the linux_sockets PMDA to be loaded and the presence of the ss utility, which are common configurations. The vulnerability is due to inverted validation logic in the sockets_check_filter() function. Mitigation involves restricting access to the pmstore utility or disabling the linux_sockets PMDA and restarting the pmcd service.

A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.

A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.