Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:5080-1

Опубликовано: 03 нояб. 2026
Источник: suse-cvrf

Описание

Security update for gvfs

This update for gvfs fixes the following issue:

  • CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation (bsc#1280058).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise Server 15 SP4-LTSS
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise Server 15 SP5-LTSS
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
gvfs-1.48.2-150400.4.18.1
gvfs-backend-afc-1.48.2-150400.4.18.1
gvfs-backend-samba-1.48.2-150400.4.18.1
gvfs-backends-1.48.2-150400.4.18.1
gvfs-devel-1.48.2-150400.4.18.1
gvfs-fuse-1.48.2-150400.4.18.1
gvfs-lang-1.48.2-150400.4.18.1

Ссылки

Описание

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown() function on a pathname inside a user-controlled directory. A local attacker can exploit this via a Time-of-Check Time-of-Use (TOCTOU) race condition and exchange the socket pathname with a symbolic link pointing to an arbitrary root-owned file (such as /etc/pam.d/su). The daemon subsequently follows the symlink and changes the ownership of the targeted root-owned file to the attacker's user ID. This allows an authenticated local attacker to modify critical system files, leading to a full local privilege escalation to root.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gvfs-1.48.2-150400.4.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gvfs-backend-afc-1.48.2-150400.4.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gvfs-backend-samba-1.48.2-150400.4.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gvfs-backends-1.48.2-150400.4.18.1
Ссылки