RHSA-2026:72272 — Red Hat Security Advisory: pcp security update

Fixed packages 150

Release	Package	Fixed in
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-conf	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-debugsource	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-devel	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-devel-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-doc	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2elasticsearch	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2graphite	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2influxdb	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2json	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2openmetrics	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2spark	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2xml	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-pcp2zabbix	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-zabbix-agent	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-export-zabbix-agent-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-geolocate	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-gui	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-gui-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-import-collectl2pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-import-collectl2pcp-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-import-ganglia2pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-import-iostat2pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-import-mrtg2pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-import-sar2pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-libs	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-libs-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-libs-devel	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-activemq	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-apache	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-apache-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bash	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bash-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bcc	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bind2	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bonding	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bpf	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bpf-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-bpftrace	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-cifs	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-cifs-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-cisco	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-cisco-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-dbping	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-denki	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-denki-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-dm	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-dm-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-docker	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-docker-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-ds389	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-ds389log	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-elasticsearch	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-farm	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-farm-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-gfs2	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-gfs2-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-gluster	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-gpfs	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-gpsd	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-hacluster	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-hacluster-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-haproxy	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-infiniband	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-infiniband-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-json	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-libvirt	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-lio	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-lmsensors	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-logger	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-logger-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-lustre	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-lustrecomm	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-lustrecomm-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mailq	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mailq-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-memcache	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mic	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mongodb	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mounts	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mounts-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mssql	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-mysql	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-named	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-netcheck	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-netfilter	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-news	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-nfsclient	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-nginx	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-nvidia-gpu	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-nvidia-gpu-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-openmetrics	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-openvswitch	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-oracle	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-pdns	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-perfevent	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-perfevent-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-podman	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-podman-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-postfix	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-postgresql	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-rabbitmq	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-redis	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-resctrl	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-resctrl-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-roomtemp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-roomtemp-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-rsyslog	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-samba	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-sendmail	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-sendmail-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-shping	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-shping-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-slurm	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-smart	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-smart-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-snmp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-sockets	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-sockets-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-statsd	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-statsd-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-summary	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-summary-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-systemd	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-systemd-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-trace	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-trace-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-unbound	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-uwsgi	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-weblog	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-weblog-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-zimbra	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-zimbra-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-pmda-zswap	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-selinux	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-system-tools	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-system-tools-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-testsuite	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-testsuite-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	pcp-zeroconf	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-LogImport	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-LogImport-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-LogSummary	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-MMV	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-MMV-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-PMDA	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	perl-PCP-PMDA-debuginfo	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	python3-pcp	0:6.3.7-1.el9_6.1
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream	python3-pcp-debuginfo	0:6.3.7-1.el9_6.1

Vulnerabilities 4

High 8.8

CVE-2026-16526

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jul 30, 2026
High 7.8

CVE-2026-16524

Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection

A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jul 30, 2026
High 7.5

CVE-2026-16529

Pcp: pcp: denial of service due to signed integer overflow

A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jul 30, 2026
High 7.3

CVE-2026-16527

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Jul 30, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2506023
report
https://bugzilla.redhat.com/show_bug.cgi?id=2506026
report
https://bugzilla.redhat.com/show_bug.cgi?id=2506031
report
https://bugzilla.redhat.com/show_bug.cgi?id=2506032
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72272.json
report
https://access.redhat.com/security/cve/CVE-2026-16524
advisory
https://www.cve.org/CVERecord?id=CVE-2026-16524
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-16524
report
https://access.redhat.com/security/cve/CVE-2026-16526
advisory
https://www.cve.org/CVERecord?id=CVE-2026-16526
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-16526
report
https://access.redhat.com/security/cve/CVE-2026-16527
advisory
https://www.cve.org/CVERecord?id=CVE-2026-16527
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-16527
report
https://access.redhat.com/security/cve/CVE-2026-16529
advisory
https://www.cve.org/CVERecord?id=CVE-2026-16529
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-16529

Red Hat Security Advisory: pcp security update

Fixed packages 150

Vulnerabilities 4

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection

Pcp: pcp: denial of service due to signed integer overflow

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

References