7.8
High
CVE-2026-41054 In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket…
Description
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Container suse/sle-micro-rancher/5.3:latest 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Container suse/sle-micro-rancher/5.4:latest 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Container suse/sle-micro/5.5:latest 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-BYOS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-BYOS-Azure 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-BYOS-EC2 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-BYOS-GCE 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-Hardened 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-Hardened-BYOS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
Show the 25 other branches Hide the 25 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Image SLES15-SP4-SAP-Hardened-BYOS-Azure 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-Hardened-BYOS-EC2 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-Hardened-BYOS-GCE 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| Image SLES15-SP4-SAP-Hardened-GCE 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Desktop 15 SP7 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP7 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Linux Enterprise Server 15 SP7 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Micro 5.3 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Micro 5.4 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Micro 5.5 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 1.9 | earliest → < 1.9.14-150600.11.6.1 | 1.9.14-150600.11.6.1 |
| SUSE Manager Proxy LTS 4.3 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Manager Retail Branch Server LTS 4.3 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
| SUSE Manager Server LTS 4.3 1.9 | earliest → < 1.9.14-150400.3.11.1 | 1.9.14-150400.3.11.1 |
References
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified