VDB
RHSA-2026:71597
RHSA-2026:71597
PUBLISHED
CVSS 4.400000095367432 MEDIUM
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2ec38f72cb1bfef50586a9d47e0a35fe5c5940920b2f2bf8a104db074efa617a_amd64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:58a4bdb32f3f7bcb254f76ae2c481b34211145ebd11a7113cefedb4e93f82e55_arm64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:cc2eba544a7bbd2e0e553c4047d4fdafc3f8df62400ae0564503b60a0ef1c6c9_ppc64le as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:313173e8a1fe02c23355e007513d85ef53036f1c435a82cfe3107dc94cbcb05b_ppc64le as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:757da547015422bed176779aa586b3116eb4abc58b01ed446caf67925d8b014f_amd64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:238f8f79c25cd8cffc52ee18b0a6ee404a7a890d42800aa2b19e28f5ba583554_arm64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c1db7a5d38c35963770e0e65db0028d87650d80189bff3afa54c4e832343471c_s390x as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:3ba4aef856fff40306d12ef5b7b52eef43d60cc24c8463afb03dea3c30118e65_ppc64le as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f2c5a73058dcfef186abf65044a1ce2e900be467682f7d67d7c646196268f87f_ppc64le as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:1835c0a3aa84ca5c21ad010dc6f34f24c6a00321b6b7fa77c768352a5b50340a_arm64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:33842a0dcd762262f57189243611517169e46e12b29799fb1328cef6ed1f159b_amd64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:05292f84200ca63b7137908c5167d2ea54edb9cb8cb374a3dfc36e9295072c26_arm64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c84ba4fbcfe5256c92f28c7e21b17e5b6c92a7be07550486bcbb6ab3d558970b_s390x as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:853d7401081ff240e619ca0c0973e208af53f11d8f3d00eac0b142096c7f5571_s390x as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:17236075a8c306b9a86901c9b5a3e63c4f6172d36f805ef3b4aed4164749de33_s390x as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:afb6a321ed95f17754bd6a2037d8c44dfbd53cf501c20fc85afcf7aaeaad53df_arm64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:dd5325f24d9ca4acae653f97adacc28a829b874c3e3afa19180feba0f3849929_ppc64le as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:fca22af3e9921a4cb3ef36f327a5d1008579f56bbf01e79f59c82970601dee73_s390x as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:b8dc820a44a21ac696952d251386783d263c2eef3d07cbcb2ea5b3daf1a685cd_amd64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:cf0ef75db27ac45c3b4ce70a32a64f16f6730c35239f6de05cb71804d3013be3_amd64 as a component of Multicluster Global Hub 1.5.8 | *, *, * |
…and 1 more
Timeline
- Sep 24, 2026 CVE Published
- Oct 12, 2026 CVE Updated
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Distribution Patch
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
- Oct 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:71597 advisory
- https://access.redhat.com/security/cve/CVE-2026-32282 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-34040 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-46604 advisory
- https://access.redhat.com/security/cve/CVE-2026-48586 advisory
- https://access.redhat.com/security/cve/CVE-2026-50151 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-66792 advisory
- https://access.redhat.com/security/cve/CVE-2026-71235 advisory
- https://access.redhat.com/security/cve/CVE-2026-71576 advisory
- https://access.redhat.com/security/cve/CVE-2026-71577 advisory
- https://access.redhat.com/security/cve/CVE-2026-73500 advisory
…and 115 more