VDB
RHSA-2026:73419
RHSA-2026:73419
PUBLISHED
CVSS 4.400000095367432 MEDIUM
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9f9673f5ae2f1dcfa87561388157534d2848f223fe3c3795fc965b0e2f713eff_amd64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:983f5f54e2505e1a8d457f45d8caab5aefd70ffebeea9f9f071dd8919aa9c5f2_arm64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3d51e8050687b6a4b399c5b04f04611ae60f13d3c0487cf5bc29506141ce3e45_amd64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:443037c84f8a951ecbad39cbdac276619fa4f7ebce01a47ddafe3c822aaf4a96_arm64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | Multicluster Global Hub | |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e3579b13e84d230bc559e3a7379718875bb5e546576c1078c703e258354fa5f1_ppc64le as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b600b7bc5ed89be2b357e268990b06c21859b7d224c70b3e195414d419357a91_s390x as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:813a184dcbc23ee970b851393c75fe54940344010debd24efba68c6c5a05fc86_amd64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:69989db7b777af7fedc5ddb9e2d8719316ca5564f13549f5e1ac3e2cb0fc7ce5_ppc64le as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:74a69caabe14c5b803ead049df8941b3ae60edb474da24fc91aaf8c95fa05154_s390x as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:c610add9308e839e7016d3428ad51e213a0d48dfb3d6dddbec6f7922c8136005_s390x as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:30838d5f38917dc0bb34318aaf788759e6cd418fc0f2b77be7a4f8d5d0b108b7_amd64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3353329adc7f7f14021393161aa75b46b405b824ba9eba849c9e015ebcd7bbcd_ppc64le as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:56d3a9ea7c66a5d15a866600a126b69da4130b637ca986b196bdab551054edc5_arm64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4c1fa54db1429d6f3b1ad062fa3c1dfdc35fbcbfe5d0d84087418c507581c1df_ppc64le as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:32bb6f5b60aa12864be8c4a0dced374c7b4fab76310dc291f4843882b6e8203b_s390x as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:06c38fd194d64956809abb9acc3614419cdcb26a3f48636a179ba62508e92c98_amd64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:4430880c68ee248d38f433c4783bc76f73ae2eeb2e407a8ed142e7f246bcf308_s390x as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c365df7ad7fb349d7b746280434b4cd73f7a586544248fd760dbffa5e5ba94d1_arm64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:757eced3376f0afcf71e9fb275d28f03e766e1364ff32d637a3d2ac16b24712c_arm64 as a component of Multicluster Global Hub 1.6.6 | *, *, * |
…and 2 more
Timeline
- Sep 29, 2026 CVE Published
- Oct 15, 2026 CVE Updated
- Oct 15, 2026 Distribution Patch
- Oct 15, 2026 Distribution Patch
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:73419 advisory
- https://access.redhat.com/security/cve/CVE-2026-32282 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-34040 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-46604 advisory
- https://access.redhat.com/security/cve/CVE-2026-48586 advisory
- https://access.redhat.com/security/cve/CVE-2026-50151 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-66792 advisory
- https://access.redhat.com/security/cve/CVE-2026-71235 advisory
- https://access.redhat.com/security/cve/CVE-2026-71576 advisory
- https://access.redhat.com/security/cve/CVE-2026-71577 advisory
- https://access.redhat.com/security/cve/CVE-2026-73500 advisory
…and 115 more