AUGUST 29, 2026
Live Feed
Back to database
Case File

CVE-2026-54229

HIGH · CVSS 7 EPSS 0.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-13 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.0. See the original NVD description below for full technical details.

CVE
CVE-2026-54229
Severity
HIGH
CVSS
7
EPSS
0.09%

Original NVD Description

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.