Threats tagged 'ghsa-xxg9-v29j-gh64'

A flaw in abrt's mitigation for CVE-2026-54228 and CVE-2026-54229 allows local attackers to bypass the completeness check by creating a 'count' element in dump directories. This enables poisoning or ownership seizure of dump directories during privileged ABRT handler processing. The issue stems from an incomplete fix that leaves certain mutating methods ungated, allowing unauthorized modification and access. Mitigation involves disabling or removing ABRT if not required and restricting local user access.