CVE-2026-4878

Published: Apr 9, 2026

Modified: Jun 3, 2026

PUBLISHED

CVSS v3.1

6.7

MEDIUM

Description

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 10	unaffected `0:2.69-7.el10_1.1 - < *`
Red Hat	Red Hat Enterprise Linux 10	unaffected `0:2.69-7.el10_2.1 - < *`
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	unaffected `0:2.69-7.el10_0.1 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:2.48-6.el8_10.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected `0:2.48-5.el8_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	unaffected `0:2.48-5.el8_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.48-10.el9_7.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.48-10.el9_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.48-10.el9_7.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.48-10.el9_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	unaffected `0:2.48-9.el9_2.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected `0:2.48-9.el9_4.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected `0:2.48-9.el9_6.1 - < *`
Red Hat	Red Hat Discovery 2	unaffected `1778101579 - < *`
Red Hat	Red Hat Discovery 2	unaffected `1778156756 - < *`
Red Hat	Red Hat Hardened Images	unaffected `2.78-1.1.hum1 - < *`
Red Hat	Red Hat Insights proxy 1.5	unaffected `1780420428 - < *`
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	unaffected `1778056267 - < *`
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	unaffected `1778056233 - < *`
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	unaffected `1778056245 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798159 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798164 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798165 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798222 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat OpenShift Container Platform 4	All versions