Name: CVE-2026-54229: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2026-06-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-54229, CWE-362, CVSS 7, EPSS 0.00124

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.

CVSS Details

CVSS 3.1 Base Score: 7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade abrt-addon-xorgUpgrade abrt-plugin-sosreportUpgrade abrt-cli-ngUpgrade abrt-guiUpgrade abrt-desktopUpgrade abrt-console-notificationUpgrade python3-abrt-addonUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-vmcoreUpgrade abrt-libsUpgrade abrt-addon-ccppUpgrade python3-abrtUpgrade abrt-tuiUpgrade abrt-cliUpgrade python3-abrt-docUpgrade abrt-addon-coredump-helperUpgrade abrt-plugin-machine-idUpgrade abrt-addon-kerneloopsUpgrade python3-abrt-container-addonUpgrade abrt-dbusUpgrade abrt-gui-libsUpgrade abrt	Oct 11, 2026	Aug 12, 2026
Redhat_linux	—	Upgrade abrt-retrace-client-debuginfoUpgrade abrt-addon-xorgUpgrade abrt-addon-pstoreoopsUpgrade abrt-cli-ngUpgrade abrt-addon-pythonUpgrade abrt-debuginfoUpgrade abrt-atomic-debuginfoUpgrade abrt-libsNo solution existsUpgrade abrt-gui-libsUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-upload-watch-debuginfoUpgrade abrt-addon-ccppUpgrade abrt-addon-kerneloopsUpgrade abrt-gui-debuginfoUpgrade abrt-libs-debuginfoUpgrade abrt-develUpgrade python3-abrt-addonUpgrade abrt-pythonUpgrade abrt-gui-develUpgrade abrt-python-docUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-desktopUpgrade abrt-addon-vmcoreUpgrade abrt-console-notificationUpgrade abrt-dbusUpgrade abrt-plugin-machine-idUpgrade abrt-addon-upload-watchUpgrade abrt-retrace-clientUpgrade abrt-guiUpgrade abrtUpgrade python3-abrtUpgrade abrt-tuiUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrt-plugin-sosreportUpgrade abrt-cliUpgrade abrt-gui-libs-debuginfoUpgrade abrt-debugsourceUpgrade abrt-dbus-debuginfoUpgrade abrt-tui-debuginfoUpgrade python3-abrt-docUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-container-addon	Jul 17, 2026	May 4, 2026
Rocky_linux	—	Upgrade abrt-addon-xorg-debuginfoUpgrade abrt-debuginfoUpgrade abrt-addon-coredump-helperUpgrade abrt-libs-debuginfoUpgrade python3-abrt-container-addonUpgrade python3-abrt-debuginfoUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-addon-vmcoreUpgrade abrt-addon-kerneloopsUpgrade abrt-console-notificationUpgrade abrt-debugsourceUpgrade python3-abrtUpgrade abrt-guiUpgrade abrt-plugin-machine-idUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-gui-libs-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-cli-ngUpgrade abrt-cliUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-desktopUpgrade abrt-dbusUpgrade abrt-tui-debuginfoUpgrade abrt-addon-ccppUpgrade abrt-gui-libsUpgrade abrtUpgrade abrt-libsUpgrade abrt-tuiUpgrade abrt-plugin-sosreportUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-xorgUpgrade abrt-dbus-debuginfoUpgrade python3-abrt-addon	Aug 14, 2026	Aug 13, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence