CVE-2026-73584
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A race condition flaw was found in sblim-sfcb during privileged instance migration. A local low-privileged attacker can manipulate a temporary file in /tmp by repeatedly recreating a symbolic link, redirecting privileged output to an arbitrary file. This can lead to privileged file corruption or denial of service.
Risk Assessment
The risk includes potential corruption of critical system files or service disruption, which may cause downtime and impact organizational operations.
Recommendation
Apply vendor patches for sblim-sfcb immediately and restrict local system access to trusted users only.
Original NVD description (English source)
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.