Описание
Security update for haveged
This update for haveged fixes the following issues:
Changes in haveged:
- CVE-2026-41054: Fixed local privilege escalation via the haveged command socket (bsc#1264086).
Список пакетов
openSUSE Leap 16.0
haveged-1.9.19-bp160.2.1
haveged-devel-1.9.19-bp160.2.1
libhavege2-1.9.19-bp160.2.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1264086
- SUSE CVE CVE-2026-41054 page
Описание
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.
Затронутые продукты
openSUSE Leap 16.0:haveged-1.9.19-bp160.2.1
openSUSE Leap 16.0:haveged-devel-1.9.19-bp160.2.1
openSUSE Leap 16.0:libhavege2-1.9.19-bp160.2.1
Ссылки
- CVE-2026-41054
- SUSE Bug 1264086