Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-41054

Missing exit out of permission check in haveged could lead to root exploit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Container suse/sle-micro-rancher/5.3:latest

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Container suse/sle-micro-rancher/5.3:latest

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Container suse/sle-micro-rancher/5.4:latest

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Container suse/sle-micro-rancher/5.4:latest

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Container suse/sle-micro/5.5:latest

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Container suse/sle-micro/5.5:latest

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS-Azure

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS-Azure

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS-EC2

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS-EC2

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS-GCE

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-BYOS-GCE

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-GCE

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE Image SLES15-SP4-SAP-Hardened-GCE

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Desktop 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Desktop 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Desktop 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Module for Basesystem 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Module for Basesystem 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Module for Basesystem 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Micro 5.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Micro 5.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Micro 5.4

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Micro 5.4

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Micro 5.5

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Micro 5.5

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP4-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP4-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP4-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP5-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP5-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP5-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server 15 SP6-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP6-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP6-LTSS

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6

Default version status: unaffected

  • ? to < 1.9.14-150600.11.6.1affected

SUSE SUSE Manager Proxy LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Proxy LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Proxy LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Retail Branch Server LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Retail Branch Server LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Retail Branch Server LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Server LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Server LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

SUSE SUSE Manager Server LTS 4.3

Default version status: unaffected

  • ? to < 1.9.14-150400.3.11.1affected

References