Summary
It was discovered that haveged incorrectly handled credential
checks on its control socket. A local attacker could possibly
use this issue to execute privileged commands.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | haveged | 1.9.19-12+deb13u1build0.25.10.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | haveged | 1.9.19-14ubuntu0.1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | haveged | 1.9.14-1ubuntu1+esm1~22.04.1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | haveged | 1.9.14-1ubuntu2+esm1~24.04.1 |
Vulnerabilities 1
-
High 7.8
Missing exit out of permission check in haveged could lead to root exploit
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`AS…
References
-
report
https://ubuntu.com/security/CVE-2026-41054