CVE-2026-54228

Name of the Vulnerable Software and Affected Versions abrt-dbus (affected versions not specified)

Description A time-of-check time-of-use (TOCTOU) race condition exists in the SetElement() method of the abrt-dbus D-Bus service. A TOCTOU race condition occurs when a program checks a condition (such as a file's existence or permissions) and then performs an action based on that check, but the condition changes between the check and the action. In this case, between the creation of the dump directory and the execution of the post-create event, a local user can call SetElement() to write arbitrary text files into the root-owned dump directory. This allows the bypass of package validation, enabling crashes of unpackaged binaries to survive post-create processing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.