CVE-2026-54229 — Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking

Description (CNA)

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.

Affected (CNA)

Vendor / product	Versions
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support	unaffected 0:2.1.11-61.el7_9 before *
Red Hat / Red Hat Enterprise Linux 8	unaffected 0:2.10.9-26.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected 0:2.10.9-25.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	unaffected 0:2.10.9-25.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected 0:2.10.9-25.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	unaffected 0:2.10.9-25.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected 0:2.10.9-25.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	unaffected 0:2.10.9-25.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 6	unknown

CWE

CWE-362

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP