Logo
›
›vulnerability›CVE-2026-4878
Name
CVE-2026-4878
Source
NVD ( link)Debian ( link)
Description
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
CWEs
CWE-367
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/errata/RHSA-2026:7473Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-4878Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2447554Permissions Required
https://bugzilla.redhat.com/show_bug.cgi?id=2451615Issue Tracking
http://www.openwall.com/lists/oss-security/2026/04/07/14Mailing List
http://www.openwall.com/lists/oss-security/2026/04/07/4Mailing List
http://www.openwall.com/lists/oss-security/2026/04/08/9Mailing List
http://www.openwall.com/lists/oss-security/2026/04/09/5Exploit
http://www.openwall.com/lists/oss-security/2026/04/09/6Exploit

Analysis#

Affected Component
Analysis
libcap
Patched

Vulnerability Ratings#

6.7
CVSSv31
7
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
libcap
buildroot
master
2.78
Not Affected
libcap
openwrt
master
2.69-r1
Not Affected
libcap
openwrt
openwrt-25.12
2.69-r1
Not Affected
libcap
yocto
kirkstone
2.66
Not Affected
libcap
yocto
master
2.78
Not Affected
libcap
yocto
scarthgap
2.69
Not Affected

Resolved with patches#

libcap (buildroot:2025.02.x)

#
Title
Author
Resolve
1
Address a potential TOCTOU race condition in cap_set_file().
"Andrew G. Morgan" <morgan@kernel.org>
CVE-2026-4878