CVE-2026-58087

A heap out-of-bounds access vulnerability exists in the semctl(2) system call on FreeBSD . The GETALL and SETALL commands suffer from a flaw where they allocate a buffer based on a semaphore count, drop a lock, and then reacquire it. While a sequence-number check is intended to prevent use of a r...

CVE-2026-58087: Integer Underflow (Wrap or Wraparound)

The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced in the interim, but t...

ROS-20231018-03

The vulnerability of the SetAll method of the D-Bus interprocess communication system of the Red Hat Enterprise Linux is related to a flaw in the authorization procedure. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

The vulnerability of the SetAll() method in the D-Bus interprocess communication mechanism of Red Hat Enterprise Linux allows a attacker to increase their privileges.

The vulnerability of the SetAll method in the D-Bus interprocess communication mechanism of Red Hat Enterprise Linux operating systems is related to deficiencies in the authorization process. Exploiting this vulnerability can allow attackers to enhance their privileges...

subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the...

PT-2023-4483 · Red Hat +5 · Subscription-Manager +6

Name of the Vulnerable Software and Affected Versions: subscription-manager affected versions not specified Description: A flaw in the authorization procedure of the D-Bus interface com.redhat.RHSM1 allows local privilege escalation. The interface exposes several methods to all users, which can...