← CVE Intelligence

CVE-2026-16526

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability PUBLISHED

Description (CNA)

A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:7.0.3-5.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:6.3.7-1.el10_0.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:5.3.7-22.el8_10.5 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:5.2.5-8.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:5.2.5-8.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:5.3.5-10.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onunaffected 0:5.3.5-10.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:5.3.7-19.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:5.3.7-19.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:6.3.7-8.el9_8.4 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:6.0.1-8.el9_2.2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:6.2.0-5.el9_4.2 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:6.3.7-1.el9_6.1 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-403

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.