Name: CVE-2026-54228: Time-of-check Time-of-use (TOCTOU) Race Condition
Creator: Rapid7
Published: 2026-06-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-54228, CWE-367, CVSS 7.8, EPSS 0.00103

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade abrt-tuiUpgrade abrt-addon-pstoreoopsUpgrade abrt-guiUpgrade abrt-addon-vmcoreUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade abrt-console-notificationUpgrade abrt-desktopUpgrade abrt-addon-xorgUpgrade python3-abrt-addonUpgrade abrt-cli-ngUpgrade python3-abrt-container-addonUpgrade abrt-cliUpgrade abrt-plugin-machine-idUpgrade abrtUpgrade abrt-addon-kerneloopsUpgrade abrt-gui-libsUpgrade abrt-dbusUpgrade python3-abrt-docUpgrade abrt-plugin-sosreportUpgrade abrt-addon-coredump-helperUpgrade python3-abrt	Oct 11, 2026	Aug 12, 2026
Oracle_linux	—	Upgrade abrt-plugin-machine-idUpgrade abrt-addon-vmcoreUpgrade abrt-cliUpgrade abrt-console-notificationUpgrade abrtUpgrade python3-abrt-docUpgrade python3-abrt-container-addonUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-retrace-clientUpgrade abrt-addon-upload-watchUpgrade python3-abrtUpgrade abrt-addon-pythonUpgrade abrt-pythonUpgrade abrt-gui-libsUpgrade abrt-desktopUpgrade abrt-addon-coredump-helperUpgrade abrt-develUpgrade abrt-python-docUpgrade abrt-tuiUpgrade abrt-dbusUpgrade abrt-plugin-sosreportUpgrade abrt-gui-develUpgrade abrt-libsUpgrade abrt-addon-ccppUpgrade python3-abrt-addonUpgrade abrt-guiUpgrade abrt-cli-ngUpgrade abrt-addon-xorg	Oct 22, 2026	Jun 13, 2026
Redhat_linux	—	Upgrade abrt-addon-xorgUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-retrace-clientUpgrade abrt-gui-develUpgrade abrt-tuiUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-gui-libs-debuginfoUpgrade abrt-libs-debuginfoUpgrade abrt-retrace-client-debuginfoUpgrade abrt-console-notificationUpgrade abrt-atomic-debuginfoUpgrade abrt-plugin-sosreportUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-debugsourceUpgrade abrt-addon-upload-watchUpgrade python3-abrt-debuginfoUpgrade abrt-dbus-debuginfoNo solution existsUpgrade abrt-cli-ngUpgrade abrt-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-libsUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-container-addonUpgrade abrt-dbusUpgrade abrt-debuginfoUpgrade abrt-addon-pythonUpgrade abrt-plugin-machine-idUpgrade abrt-addon-kerneloopsUpgrade python3-abrtUpgrade abrt-python-docUpgrade abrt-desktopUpgrade abrt-guiUpgrade abrt-addon-ccppUpgrade abrt-gui-libsUpgrade abrt-addon-vmcoreUpgrade python3-abrt-docUpgrade abrt-pythonUpgrade abrtUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade python3-abrt-addonUpgrade abrt-develUpgrade abrt-addon-upload-watch-debuginfoUpgrade abrt-tui-debuginfo	Jul 17, 2026	May 4, 2026
Rocky_linux	—	Upgrade abrt-addon-ccppUpgrade abrt-plugin-machine-idUpgrade abrt-gui-libsUpgrade abrt-addon-pstoreoopsUpgrade abrt-guiUpgrade abrt-dbusUpgrade abrt-addon-coredump-helperUpgrade abrt-debugsourceUpgrade abrtUpgrade abrt-cliUpgrade python3-abrt-debuginfoUpgrade python3-abrt-container-addonUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-plugin-sosreportUpgrade python3-abrtUpgrade abrt-console-notificationUpgrade abrt-dbus-debuginfoUpgrade abrt-tuiUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-tui-debuginfoUpgrade abrt-libsUpgrade abrt-gui-libs-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-desktopUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade python3-abrt-addonUpgrade abrt-libs-debuginfoUpgrade abrt-debuginfoUpgrade abrt-addon-xorgUpgrade abrt-cli-ngUpgrade abrt-addon-vmcore	Aug 14, 2026	Aug 13, 2026

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence