Red Hat Enterprise Linux (pcp): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.8
  CVE-2026-16526

  Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

  A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026
• High 7.8
  CVE-2026-16524

  Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection

  A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026
• High 7.5
  CVE-2026-16529

  Pcp: pcp: denial of service due to signed integer overflow

  A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026
• High 7.3
  CVE-2026-16527

  Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

  An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026

Revision history

1. 2026-10-01 #12

   Neue Updates von Red Hat aufgenommen

2. 2026-09-30 #11

   Neue Updates von Red Hat aufgenommen

3. 2026-09-28 #10

   Neue Updates von Red Hat aufgenommen

4. 2026-09-27 #9

   Neue Updates von Red Hat aufgenommen

5. 2026-09-09 #8

   Neue Updates von SUSE aufgenommen

6. 2026-08-30 #7

   Neue Updates von SUSE aufgenommen

7. 2026-08-27 #6

   Neue Updates von openSUSE aufgenommen

8. 2026-08-23 #5

   Neue Updates von SUSE aufgenommen

9. 2026-08-19 #4

   Neue Updates von Oracle Linux aufgenommen

10. 2026-08-18 #3

    Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

11. 2026-08-17 #2

    Neue Updates von Amazon, Red Hat und Rocky Enterprise Software Foundation aufgenommen

12. 2026-08-16 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:55560 vom 2026-08-16
  https://access.redhat.com/errata/RHSA-2026:55560
• Amazon Linux Security Advisory ALAS2-2026-3857 vom 2026-08-18
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3857.html
• Red Hat Security Advisory RHSA-2026:55740 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:55740
• Rocky Linux Security Advisory RLSA-2026:55740 vom 2026-08-18
  https://errata.build.resf.org/RLSA-2026:55740
• Red Hat Security Advisory RHSA-2026:55617 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:55617
• Rocky Linux Security Advisory RLSA-2026:55560 vom 2026-08-18
  https://errata.build.resf.org/RLSA-2026:55560
• Oracle Linux Security Advisory ELSA-2026-55617 vom 2026-08-18
  https://oss.oracle.com/pipermail/el-errata/2026-August/021636.html
• Oracle Linux Security Advisory ELSA-2026-55560 vom 2026-08-19
  https://linux.oracle.com/errata/ELSA-2026-55560.html
• Rocky Linux Security Advisory RLSA-2026:55617 vom 2026-08-18
  https://errata.build.resf.org/RLSA-2026:55617
• Oracle Linux Security Advisory ELSA-2026-55740 vom 2026-08-20
  https://linux.oracle.com/errata/ELSA-2026-55740.html
• SUSE Security Update SUSE-SU-2026:23174-1 vom 2026-08-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028413.html
• openSUSE Security Update OPENSUSE-SU-2026:21636-1 vom 2026-08-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CAAMNZXOKB2HKJFK3AOUEXLR3DI7UNO2/
• SUSE Security Update SUSE-SU-2026:23277-1 vom 2026-08-30
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028572.html
• SUSE Security Update SUSE-SU-2026:23316-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028685.html
• Red Hat Security Advisory RHSA-2026:72272 vom 2026-09-28
  https://access.redhat.com/errata/RHSA-2026:72272
• Red Hat Security Advisory RHSA-2026:72273 vom 2026-09-28
  https://access.redhat.com/errata/RHSA-2026:72273
• Red Hat Security Advisory RHSA-2026:72593 vom 2026-09-28
  https://access.redhat.com/errata/RHSA-2026:72593
• Red Hat Security Advisory RHSA-2026:72594 vom 2026-09-28
  https://access.redhat.com/errata/RHSA-2026:72594
• Red Hat Security Advisory RHSA-2026:73767 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:73767
• Red Hat Security Advisory RHSA-2026:74613 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74613
• Red Hat Security Advisory RHSA-2026:74612 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74612