CVE-2026-73584

Summary

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the /tmp directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.

Affected Software

VendorProductVersion RangeStatus

Weaknesses

  • CWE-377: Insecure Temporary File

Workarounds

To mitigate this issue, if instance migration is not required, run the sfcbrepos command with the -i option to disable the vulnerable migration path. For example: sudo sfcbrepos -f -i. Alternatively, avoid running sfcbrepos with elevated privileges on systems where untrusted local users can concurrently write to the /tmp directory. A service restart or reload may be required for changes to take effect if sfcbrepos is managed by a service.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References