Threats tagged 'ghsa-58x3-7493-rjr4'

CVE-2026-73584 is a moderate severity vulnerability in sblim-sfcb that allows a local low-privileged attacker to exploit a race condition during privileged instance migration by manipulating a temporary file in /tmp. This race condition involves repeatedly recreating a symbolic link to redirect privileged output to an arbitrary file, potentially causing privileged file corruption or denial of service. Exploitation requires winning a race during privileged sfcbrepos instance migration, which must be enabled and have specific repository content. The attack complexity is high and specific preconditions limit broader impact. Mitigation includes disabling instance migration with the -i option or avoiding running sfcbrepos with elevated privileges where untrusted local users can write to /tmp.