Critical Symlink Traversal Vulnerabilities in Fedora 44 Affected by CVEs

Linuxsecurity

Critical Symlink Traversal Vulnerabilities in Fedora 44 Affected by CVEs

First seen 11 Jul 2026, 23:28 UTC • •72.8

Article Content

1 / 8

Browse articles

ThreatCluster •July 12, 2026 at 23:11 UTC

•Fedora 44 acl and attr packages have critical symlink traversal vulnerabilities.
•Three CVEs (CVE-2026-54369, CVE-2026-54370, CVE-2026-54371) were published on June 29, 2026.
•Users are urged to apply updates immediately to mitigate privilege escalation risks.

On July 9, 2026, Fedora released updates addressing critical symlink traversal vulnerabilities in its acl and attr packages. The vulnerabilities, identified as CVE-2026-54369, CVE-2026-54370, and CVE-2026-54371, were published on June 29, 2026. CVE-2026-54369 and CVE-2026-54370 involve privilege escalation via libacl functions and TOCTOU symlink traversal through getfacl/setfacl. CVE-2026-54371 also presents a privilege escalation risk via getfattr. These vulnerabilities could allow attackers to gain elevated privileges on affected systems. Users are advised to upgrade to the latest versions using the provided dnf commands. The updates are critical for maintaining system security against potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 89d ago How this analysis works

Timeline

2026-06-29

CVE-2026-54369 published

CVE-2026-54369 details a symlink traversal privilege escalation vulnerability via libacl functions.

2026-06-29

CVE-2026-54370 published

CVE-2026-54370 describes a TOCTOU symlink traversal vulnerability via getfacl/setfacl.

2026-06-29

CVE-2026-54371 published

CVE-2026-54371 outlines a privilege escalation vulnerability via getfattr.

2026-07-09

Fedora releases updates for acl and attr packages

Updates were released to address the critical vulnerabilities in acl and attr packages, resolving the identified CVEs.

2026-07-09

Users advised to upgrade

Fedora users are urged to upgrade their systems using dnf to mitigate the vulnerabilities.

More articles in this cluster (7)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Privilege Escalation
T1068 - Exploitation for Privilege Escalation

Organization (1)

Fedora

Vulnerability (3)

CVE-2026-54369
CVE-2026-54370
CVE-2026-54371

Weakness (1)

CWE-269 - Improper Privilege Management

Relationships

CVE-2026-54369 related to Privilege Escalation
CVE-2026-54369 related to Fedora
CVE-2026-54369 related to CVE-2026-54370
CVE-2026-54369 related to CVE-2026-54371
CVE-2026-54369 related to CWE-269 - Improper Privilege Management
CVE-2026-54369 related to T1068 - Exploitation for Privilege Escalation

Following this threat?

Track Fedora and CVE-2026-54369 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

SUSE acl Vulnerabilities Allow Local Privilege Escalation SUSE has released updates addressing critical vulnerabilities in the acl and attr packages, specifically CVE-2026-54369, CVE-2026-54370, and CVE-2026-54371. These vulnerabilities allow attackers to exploit symlink traversal issues in libacl functions, potentially leading to local privilege escalation. The affected…

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…