Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-73584 EUVD-2026-57829GHSA-58x3-7493-rjr4

Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

Published Aug 13, 2026 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS sblim-sfcb No fix yet —
Ubuntu 24.04 LTS sblim-sfcb No fix yet —
Ubuntu 22.04 LTS sblim-sfcb No fix yet —
Ubuntu 20.04 LTS sblim-sfcb No fix yet —
Ubuntu 18.04 LTS sblim-sfcb No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS sblim-sfcb No fix yet —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 sblim-sfcb No fix yet —

References