Количество 79
Количество 79
GHSA-xj38-jxc5-rppx
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
CVE-2026-32282
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while ...
ROS-20260430-80-0011
Уязвимость golang
RLSA-2026:25999
Moderate: yggdrasil-worker-package-manager security update
ELSA-2026-25999
ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE)
BDU:2026-07252
Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии
ROS-20260729-80-0025
Уязвимость coredns
ROS-20260729-73-0017
Уязвимость coredns
ROS-20260710-80-0031
Уязвимость mimir
ROS-20260710-73-0031
Уязвимость mimir
ROS-20260430-73-0011
Уязвимость golang
RLSA-2026:19351
Important: grafana-pcp security update
RLSA-2026:19136
Important: grafana-pcp security update
RLSA-2026:17075
Important: yggdrasil security update
RLSA-2026:11712
Important: grafana security update
RLSA-2026:11711
Important: grafana security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xj38-jxc5-rppx On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 6.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-32282 On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 6.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-32282 On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-32282 On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation. | CVSS3: 6.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-32282 TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix | 0% Низкий | 6 месяцев назад | |
| CVE-2026-32282 On Linux, if the target of Root.Chmod is replaced with a symlink while ... | CVSS3: 6.4 | 0% Низкий | 6 месяцев назад |
 | ROS-20260430-80-0011 Уязвимость golang | CVSS3: 6.4 | 0% Низкий | 5 месяцев назад |
 | RLSA-2026:25999 Moderate: yggdrasil-worker-package-manager security update | 0% Низкий | 3 месяца назад | |
| ELSA-2026-25999 ELSA-2026-25999: yggdrasil-worker-package-manager security update (MODERATE) | 0% Низкий | 2 месяца назад | |
 | BDU:2026-07252 Уязвимость языка программирования Go, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.4 | 0% Низкий | 6 месяцев назад |
| ROS-20260729-80-0025 Уязвимость coredns | CVSS3: 6.4 | 0% Низкий | 2 месяца назад |
| ROS-20260729-73-0017 Уязвимость coredns | CVSS3: 6.4 | 0% Низкий | 2 месяца назад |
| ROS-20260710-80-0031 Уязвимость mimir | CVSS3: 6.4 | 0% Низкий | 3 месяца назад |
| ROS-20260710-73-0031 Уязвимость mimir | CVSS3: 6.4 | 0% Низкий | 3 месяца назад |
| ROS-20260430-73-0011 Уязвимость golang | CVSS3: 6.4 | 0% Низкий | 5 месяцев назад |
| RLSA-2026:19351 Important: grafana-pcp security update | 4 месяца назад | ||
| RLSA-2026:19136 Important: grafana-pcp security update | 4 месяца назад | ||
| RLSA-2026:17075 Important: yggdrasil security update | 4 месяца назад | ||
| RLSA-2026:11712 Important: grafana security update | 5 месяцев назад | ||
| RLSA-2026:11711 Important: grafana security update | 5 месяцев назад |
Уязвимостей на страницу