Summary
firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.
Security Fix(es):
* firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | firewall-applet | 1.3.4-20.el9_8 |
| AlmaLinux · 9 | firewall-config | 1.3.4-20.el9_8 |
| AlmaLinux · 9 | firewalld | 1.3.4-20.el9_8 |
| AlmaLinux · 9 | firewalld-filesystem | 1.3.4-20.el9_8 |
| AlmaLinux · 9 | python3-firewall | 1.3.4-20.el9_8 |
Vulnerabilities 1
-
Medium 5.5
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall s…