Name: CVE-2026-54229: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2026-06-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-54229, CWE-362, CVSS 7, EPSS 0.00093

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.

CVSS Details

CVSS 3.1 Base Score: 7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade abrt-gui-libsUpgrade abrt-dbusUpgrade abrtUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-container-addonUpgrade abrt-plugin-machine-idUpgrade abrt-addon-kerneloopsUpgrade python3-abrt-docUpgrade abrt-cliUpgrade abrt-cli-ngUpgrade abrt-libsUpgrade python3-abrtUpgrade abrt-addon-xorgUpgrade abrt-guiUpgrade abrt-tuiUpgrade abrt-plugin-sosreportUpgrade abrt-desktopUpgrade abrt-addon-vmcoreUpgrade abrt-addon-ccppUpgrade python3-abrt-addonUpgrade abrt-addon-pstoreoopsUpgrade abrt-console-notification	Oct 11, 2026	Aug 12, 2026
Oracle_linux	—	Upgrade abrt-console-notificationUpgrade python3-abrt-container-addonUpgrade abrt-dbusUpgrade python3-abrtUpgrade abrt-addon-vmcoreUpgrade abrt-cliUpgrade abrt-python-docUpgrade abrt-guiUpgrade abrt-tuiUpgrade abrt-pythonUpgrade abrt-addon-pythonUpgrade abrt-addon-coredump-helperUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-upload-watchUpgrade abrt-gui-develUpgrade abrt-plugin-sosreportUpgrade abrtUpgrade abrt-cli-ngUpgrade abrt-addon-xorgUpgrade abrt-gui-libsUpgrade abrt-desktopUpgrade abrt-plugin-machine-idUpgrade abrt-libsUpgrade abrt-addon-pstoreoopsUpgrade python3-abrt-docUpgrade python3-abrt-addonUpgrade abrt-addon-ccppUpgrade abrt-retrace-clientUpgrade abrt-devel	Oct 22, 2026	Jun 13, 2026
Redhat_linux	—	Upgrade python3-abrtUpgrade abrt-plugin-sosreportUpgrade abrt-cliUpgrade abrt-debugsourceUpgrade abrt-dbus-debuginfoUpgrade abrt-gui-libs-debuginfoUpgrade abrt-addon-vmcoreUpgrade abrt-addon-upload-watchUpgrade abrt-console-notificationUpgrade abrt-dbusUpgrade abrt-addon-coredump-helperUpgrade abrtUpgrade abrt-retrace-clientUpgrade abrt-guiUpgrade python3-abrt-container-addonUpgrade python3-abrt-docUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-tui-debuginfoUpgrade abrt-plugin-machine-idUpgrade abrt-tuiUpgrade python3-abrt-debuginfoUpgrade abrt-addon-kerneloops-debuginfoNo solution existsUpgrade abrt-retrace-client-debuginfoUpgrade abrt-gui-develUpgrade abrt-addon-coredump-helper-debuginfoUpgrade python3-abrt-addonUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-libs-debuginfoUpgrade abrt-desktopUpgrade abrt-develUpgrade abrt-cli-ngUpgrade abrt-atomic-debuginfoUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-upload-watch-debuginfoUpgrade abrt-pythonUpgrade abrt-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-addon-ccppUpgrade abrt-gui-libsUpgrade abrt-addon-xorgUpgrade abrt-addon-pythonUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-python-docUpgrade abrt-libs	Jul 17, 2026	May 4, 2026
Rocky_linux	—	Upgrade abrt-plugin-machine-idUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-console-notificationUpgrade abrt-addon-kerneloopsUpgrade abrt-debugsourceUpgrade abrt-addon-coredump-helperUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-debuginfoUpgrade abrt-addon-vmcoreUpgrade python3-abrt-debuginfoUpgrade python3-abrtUpgrade abrt-libs-debuginfoUpgrade python3-abrt-container-addonUpgrade abrt-guiUpgrade abrt-plugin-sosreportUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-libsUpgrade abrt-gui-libs-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-desktopUpgrade abrt-cliUpgrade abrt-tui-debuginfoUpgrade abrt-dbusUpgrade abrtUpgrade abrt-addon-ccppUpgrade abrt-dbus-debuginfoUpgrade abrt-cli-ngUpgrade abrt-gui-libsUpgrade python3-abrt-addonUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-xorgUpgrade abrt-gui-debuginfoUpgrade abrt-tui	Aug 14, 2026	Aug 13, 2026

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence