Moderate Security Vulnerability in attr Package: Symlink Traversal Privilege Escalation
Summary
ALSA-2026:59380: Moderate: attr security update. Affects attr versions < 2.6.0-1.el10_2. Fixed in 2.6.0-1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The attr package is essential for managing extended attributes in Linux systems, allowing users to store metadata such as capabilities of executables and access control lists. This functionality is crucial for enhancing security and managing user permissions effectively. However, vulnerabilities in this package can lead to significant security risks, particularly when it comes to privilege escalation.
Vulnerability Detail
The vulnerability identified as CVE-2026-54371 allows for a symlink traversal privilege escalation through the getfattr and setfattr commands. An attacker could exploit this vulnerability to gain unauthorized access to sensitive files or execute commands with elevated privileges, potentially compromising the entire system. This issue arises from improper handling of symbolic links, which can mislead the system into granting access to files that should be protected.
How To Fix
Minimum fixed version
2.6.0-1.el10_2
This is the first release that contains the fix.
sudo dnf update attrTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict the use of the getfattr and setfattr commands until the package is updated. This can be done by modifying user permissions or using access control lists to limit access to these commands.
Conclusion
The attr package has a moderate security vulnerability that can lead to privilege escalation through symlink traversal. It is crucial for users to update their packages to the latest version to mitigate this risk. Temporary workarounds can be implemented, but the best course of action is to apply the necessary updates as soon as possible.
See every vulnerability recorded for attr →
FAQ
The impact includes potential unauthorized access to sensitive files and privilege escalation, which can lead to system compromise.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If an immediate update is not possible, consider restricting access to the affected commands as a temporary measure.
Yes, the vulnerability affects versions prior to 2.6.0-1.el10_2 of the attr package.
Extended attributes are metadata associated with files in Linux that allow for additional information, such as security and access control settings, to be stored.
Related vulnerabilities
Recent vulnerabilities recorded for attr.
