CVE-2026-54228
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.
Risk Assessment
The organization is at risk of local privilege escalation, as an attacker can manipulate crash dump files, potentially hiding or modifying evidence of crashes and enabling further system attacks.
Recommendation
Immediately update the abrt package to a version containing the fix for the race condition in the SetElement method. Until the update is applied, restrict local user access to the abrt-dbus service.
Original NVD description (English source)
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.