Description (CNA)
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / Container suse/sle-micro-rancher/5.3:latest | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Container suse/sle-micro-rancher/5.3:latest | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Container suse/sle-micro-rancher/5.4:latest | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Container suse/sle-micro-rancher/5.4:latest | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Container suse/sle-micro/5.5:latest | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Container suse/sle-micro/5.5:latest | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS-Azure | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS-Azure | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS-EC2 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS-EC2 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS-GCE | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-BYOS-GCE | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-Azure | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-Azure | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-EC2 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-EC2 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-GCE | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-BYOS-GCE | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-GCE | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / Image SLES15-SP4-SAP-Hardened-GCE | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Desktop 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Desktop 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Desktop 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Module for Basesystem 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Module for Basesystem 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Module for Basesystem 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP7 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Micro 5.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Micro 5.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Micro 5.4 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Micro 5.4 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Micro 5.5 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Micro 5.5 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP4-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP4-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP4-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP5-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP5-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP5-LTSS | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP6-LTSS | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP6-LTSS | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP6-LTSS | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP4 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP4 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP4 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP5 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP5 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP5 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP6 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP6 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP6 | affected ? before 1.9.14-150600.11.6.1 |
| SUSE / SUSE Manager Proxy LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Proxy LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Proxy LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Retail Branch Server LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Retail Branch Server LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Retail Branch Server LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Server LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Server LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
| SUSE / SUSE Manager Server LTS 4.3 | affected ? before 1.9.14-150400.3.11.1 |
CWE
CWE-305
References
ADP enrichment
No English description supplied.
- http://www.openwall.com/lists/oss-security/2026/05/19/3
- http://www.openwall.com/lists/oss-security/2026/05/19/4
- http://www.openwall.com/lists/oss-security/2026/05/19/5
- http://www.openwall.com/lists/oss-security/2026/05/20/1
- http://www.openwall.com/lists/oss-security/2026/05/21/17
- http://www.openwall.com/lists/oss-security/2026/05/22/1
- https://lists.debian.org/debian-lts-announce/2026/06/msg00005.html
No English description supplied.
No references supplied.