USN-8581-1 libarchive vulnerabilities

It was discovered that libarchive did not properly manage memory when unpacking certain RAR5 archives, leading to a double free. An attacker could possibly use this issue to cause a denial of service. CVE-2026-14164 It was discovered that libarchive did not properly validate certain tar archives,...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

SUSE CVE-2026-54369

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile, aclextendedfile, and acldeletedeffile that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who contr...

SUSE CVE-2026-64139

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in setposixaclentriesdacl on overflow Commit 299f962c0b02 "ksmbd: use checkaddoverflow to prevent u16 DACL size overflow" added checkaddoverflow guards that break out of the ACE-building loops in...

CVE-2026-64139

A flaw was found in the ksmbd kernel SMB daemon component of the Linux kernel. A malicious or specially crafted file with a large number of POSIX Access Control List ACL entries can trigger a memory leak in the setposixaclentriesdacl function. This occurs when the accumulated DACL size overflows,...

ALSA-2026:42736 Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

Linux Distros Unpatched Vulnerability : CVE-2026-15812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured t...

Oracle Linux 9 : acl (ELSA-2026-42736)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42736 advisory. 2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186111 -...

CVE-2026-53397

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability occurs during the processing of Access Control List ACL set operations. If a specific decode step fails, a memory leak of a posixacl object occurs. This can lead to resource exhaustion over time, potentiall...

CVE-2026-53396

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd within the nfsd4createfile function. This vulnerability allows a remote attacker to cause a denial of service DoS by repeatedly triggering a memory leak of posixacl allocations. The leak occurs when a client attempts to...

nfsd: fix posix_acl leak on SETACL decode failure

...

Amazon Linux 2023 : acl, libacl, libacl-devel (ALAS2023-2026-1986)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1986 advisory. A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname...

Linux Distros Unpatched Vulnerability : CVE-2026-64139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix SID memory leak in setposixaclentriesdacl on overflow Commit 299f962c0b02 ksmbd: use checkaddoverflow to prevent u16 DACL size overflow added...

OPENSUSE-SU-2026:11312-1 acl-2.4.0-1.1 on GA media

These are all security issues fixed in the acl-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: acl

Issue Overview: A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or wri...

Linux Distros Unpatched Vulnerability : CVE-2026-53396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix posixacl leak and ignored error in nfsd4createfile nfsd4createfile has two bugs in its ACL handling: The return value of nfsd4acltoattr is silently...

SUSE CVE-2026-53396

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak and ignored error in nfsd4createfile nfsd4createfile has two bugs in its ACL handling: The return value of nfsd4acltoattr is silently discarded. When the NFSv4-to-POSIX ACL conversion fails e.g., -EINVAL f...

SUSE CVE-2026-53397

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak on SETACL decode failure nfsaclsvcdecodesetaclargs and nfs3svcdecodesetaclargs each call nfsstreamdecodeacl twice, first for NFSACL and then for NFSDFACL. Each successful call transfers ownership of a...