Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-104618

sdbootutil: world-readable debug log

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Linux Enterprise Server 16.1

Default version status: affected

  • ?affected

SUSE SUSE Linux Enterprise Server for NVIDIA 16.1

Default version status: affected

  • ?affected

SUSE openSUSE Leap 16.1

Default version status: affected

  • ?affected

openSUSE Tumbleweed

Default version status: unaffected

  • ? to < 278458aeb7d8f995c0e3dc9d19d2dcba50795a42affected

References