Summary
Ali Raza discovered that libcap incorrectly handled file capability
updates. A local attacker could possibly use this issue to inject or strip
capabilities into arbitrary executables and escalate privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libcap2 | 1:2.44-1ubuntu0.22.04.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | libcap2 | 1:2.66-5ubuntu2.4 |
| Ubuntu · 25.10 | libcap2 | 1:2.75-7ubuntu2.2 |
Vulnerabilities 1
-
Medium 6.7
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to a…
References
-
report
https://ubuntu.com/security/CVE-2026-4878