CVE-2026-4878

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:12423
https://access.redhat.com/errata/RHSA-2026:12441
https://access.redhat.com/errata/RHSA-2026:13285
https://access.redhat.com/errata/RHSA-2026:14162
https://access.redhat.com/errata/RHSA-2026:14937
https://access.redhat.com/errata/RHSA-2026:19130
https://access.redhat.com/errata/RHSA-2026:19346
https://access.redhat.com/errata/RHSA-2026:19456
https://access.redhat.com/errata/RHSA-2026:19458
https://access.redhat.com/errata/RHSA-2026:20595
https://access.redhat.com/errata/RHSA-2026:21254
https://access.redhat.com/errata/RHSA-2026:21275
https://access.redhat.com/errata/RHSA-2026:22634
https://access.redhat.com/errata/RHSA-2026:22957
https://access.redhat.com/errata/RHSA-2026:23233
https://access.redhat.com/errata/RHSA-2026:23245
https://access.redhat.com/errata/RHSA-2026:24346
https://access.redhat.com/errata/RHSA-2026:25044
https://access.redhat.com/errata/RHSA-2026:25096
https://access.redhat.com/errata/RHSA-2026:25181
https://access.redhat.com/errata/RHSA-2026:26542
https://access.redhat.com/errata/RHSA-2026:27998
https://access.redhat.com/errata/RHSA-2026:28887
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30078
https://access.redhat.com/errata/RHSA-2026:30087
https://access.redhat.com/errata/RHSA-2026:30088
https://access.redhat.com/errata/RHSA-2026:30089
https://access.redhat.com/errata/RHSA-2026:34098
https://access.redhat.com/errata/RHSA-2026:39981
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:59831
https://access.redhat.com/errata/RHSA-2026:72502
https://access.redhat.com/errata/RHSA-2026:74674
https://access.redhat.com/errata/RHSA-2026:7473 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82304
https://access.redhat.com/errata/RHSA-2026:82322
https://access.redhat.com/errata/RHSA-2026:82347
https://access.redhat.com/errata/RHSA-2026:82354
https://access.redhat.com/errata/RHSA-2026:82372
https://access.redhat.com/errata/RHSA-2026:82857
https://access.redhat.com/errata/RHSA-2026:82888
https://access.redhat.com/security/cve/CVE-2026-4878 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2447554 Permissions Required
https://bugzilla.redhat.com/show_bug.cgi?id=2451615 Issue Tracking Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/04/07/14 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/04/07/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/04/08/9 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/04/09/5 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/04/09/6 Exploit Mailing List Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12423
https://access.redhat.com/errata/RHSA-2026:12441
https://access.redhat.com/errata/RHSA-2026:13285
https://access.redhat.com/errata/RHSA-2026:14162
https://access.redhat.com/errata/RHSA-2026:14937
https://access.redhat.com/errata/RHSA-2026:19130
https://access.redhat.com/errata/RHSA-2026:19346
https://access.redhat.com/errata/RHSA-2026:19456
https://access.redhat.com/errata/RHSA-2026:19458
https://access.redhat.com/errata/RHSA-2026:20595
https://access.redhat.com/errata/RHSA-2026:21254
https://access.redhat.com/errata/RHSA-2026:21275
https://access.redhat.com/errata/RHSA-2026:22634
https://access.redhat.com/errata/RHSA-2026:22957
https://access.redhat.com/errata/RHSA-2026:23233
https://access.redhat.com/errata/RHSA-2026:23245
https://access.redhat.com/errata/RHSA-2026:24346
https://access.redhat.com/errata/RHSA-2026:25044
https://access.redhat.com/errata/RHSA-2026:25096
https://access.redhat.com/errata/RHSA-2026:25181
https://access.redhat.com/errata/RHSA-2026:26542
https://access.redhat.com/errata/RHSA-2026:27998
https://access.redhat.com/errata/RHSA-2026:28887
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30078
https://access.redhat.com/errata/RHSA-2026:30087
https://access.redhat.com/errata/RHSA-2026:30088
https://access.redhat.com/errata/RHSA-2026:30089
https://access.redhat.com/errata/RHSA-2026:34098
https://access.redhat.com/errata/RHSA-2026:39981
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:59831
https://access.redhat.com/errata/RHSA-2026:7473 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-4878 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2451615 Issue Tracking Vendor Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:libcap_project:libcap:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

History

26 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en libcap. Un usuario local sin privilegios puede explotar una condición de carrera de tipo Time-of-check-to-time-of-use (TOCTOU) en la función ’cap_set_file()’. Esto permite a un atacante con acceso de escritura a un directorio padre redirigir las actualizaciones de capacidades de archivo a un archivo controlado por el atacante. Al hacerlo, las capacidades pueden ser inyectadas o eliminadas de ejecutables no deseados, lo que lleva a una escalada de privilegios.

14 Oct 2026, 20:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82857 -
  • () https://access.redhat.com/errata/RHSA-2026:82888 -

14 Oct 2026, 03:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82304 -
  • () https://access.redhat.com/errata/RHSA-2026:82322 -
  • () https://access.redhat.com/errata/RHSA-2026:82347 -
  • () https://access.redhat.com/errata/RHSA-2026:82354 -
  • () https://access.redhat.com/errata/RHSA-2026:82372 -

02 Oct 2026, 02:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74674 -

29 Sep 2026, 01:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72502 -

Information

Published : 2026-04-09 16:16

Updated : 2026-10-26 21:10


NVD link : CVE-2026-4878

Mitre link : CVE-2026-4878

CVE.ORG link : CVE-2026-4878


JSON object : View

Products Affected

redhat

  • openshift_container_platform
  • enterprise_linux

libcap_project

  • libcap
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition