Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Missing exit out of permission check in haveged could lead to root exploit (SUSE Container suse/sle-micro-rancher/5.3:latest)

CVE-2026-41054
HIGH 7.8

En bref

Source
NVD
EPSS
EPSS 0.18 % · centile 8 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
suse
Statut NVD
Awaiting Analysis

Rechercher sur…

Description

In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.

Faiblesses (CWE)

  • CWE-305 — Contournement d'authentification par faiblesse primaire

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsuse
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · meissner@suse.de (Secondary)

Références européennes

Produits affectés

ProduitVersions
SUSE · Container suse/sle-micro-rancher/5.3:latestaffected ? < 1.9.14-150400.3.11.1
SUSE · Container suse/sle-micro-rancher/5.3:latestaffected ? < 1.9.14-150400.3.11.1
SUSE · Container suse/sle-micro-rancher/5.4:latestaffected ? < 1.9.14-150400.3.11.1
SUSE · Container suse/sle-micro-rancher/5.4:latestaffected ? < 1.9.14-150400.3.11.1
SUSE · Container suse/sle-micro/5.5:latestaffected ? < 1.9.14-150400.3.11.1
SUSE · Container suse/sle-micro/5.5:latestaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOSaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOSaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOS-Azureaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOS-Azureaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOS-EC2affected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOS-EC2affected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOS-GCEaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-BYOS-GCEaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-Hardenedaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-Hardenedaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-Hardened-BYOSaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-Hardened-BYOSaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-Hardened-BYOS-Azureaffected ? < 1.9.14-150400.3.11.1
SUSE · Image SLES15-SP4-SAP-Hardened-BYOS-Azureaffected ? < 1.9.14-150400.3.11.1

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD