Skip to content
OpenAdvisories

Package · Debian

acl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-54370

    acl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl

    acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-fo…

    acl project acl acl acl Debian Ubuntu