Threats Tagged 'cve-2026-73584'

CVE-2026-73584 is a moderate severity vulnerability in sblim-sfcb that allows a local low-privileged attacker to exploit a race condition during privileged instance migration by manipulating a temporary file in /tmp. This race condition involves repeatedly recreating a symbolic link to redirect privileged output to an arbitrary file, potentially causing privileged file corruption or denial of service. Exploitation requires winning a race during privileged sfcbrepos instance migration, which must be enabled and have specific repository content. The attack complexity is high and specific preconditions limit broader impact. Mitigation includes disabling instance migration with the -i option or avoiding running sfcbrepos with elevated privileges where untrusted local users can write to /tmp.

CVE-2026-73584 is a moderate severity vulnerability in the sblim-sfcb component of Red Hat Enterprise Linux 10. It involves a race condition during privileged instance migration where a local low-privileged attacker can manipulate a temporary file in /tmp by repeatedly recreating a symbolic link. This can cause privileged file corruption or denial of service (DoS). Exploitation requires specific conditions including enabled instance migration and particular repository content, making the attack complexity high. Mitigation includes disabling the vulnerable migration path with the sfcbrepos -i option or avoiding running sfcbrepos with elevated privileges when untrusted local users have write access to /tmp. No official patch or fix has been confirmed yet.