{"id":"CVE-2026-41054","state":"PUBLISHED","title":"Missing exit out of permission check in haveged could lead to root exploit","description":"In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.","publishedAt":"2026-05-20T08:56:14.466Z","updatedAt":"2026-06-05T11:06:34.200Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"suse"},"assigner":"suse","products":["SUSE Container suse/sle-micro-rancher/5.3:latest","SUSE Container suse/sle-micro-rancher/5.4:latest","SUSE Container suse/sle-micro/5.5:latest","SUSE Image SLES15-SP4-SAP-BYOS","SUSE Image SLES15-SP4-SAP-BYOS-Azure","SUSE Image SLES15-SP4-SAP-BYOS-EC2","SUSE Image SLES15-SP4-SAP-BYOS-GCE","SUSE Image SLES15-SP4-SAP-Hardened","SUSE Image SLES15-SP4-SAP-Hardened-BYOS","SUSE Image SLES15-SP4-SAP-Hardened-BYOS-Azure","SUSE Image SLES15-SP4-SAP-Hardened-BYOS-EC2","SUSE Image SLES15-SP4-SAP-Hardened-BYOS-GCE","SUSE Image SLES15-SP4-SAP-Hardened-GCE","SUSE SUSE Linux Enterprise Desktop 15 SP7","SUSE SUSE Linux Enterprise High Performance Computing 15 SP7","SUSE SUSE Linux Enterprise Module for Basesystem 15 SP7","SUSE SUSE Linux Enterprise Server 15 SP7","SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7","SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","SUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","SUSE SUSE Linux Enterprise Micro 5.3","SUSE SUSE Linux Enterprise Micro 5.4","SUSE SUSE Linux Enterprise Micro 5.5","SUSE SUSE Linux Enterprise Server 15 SP4-LTSS","SUSE SUSE Linux Enterprise Server 15 SP5-LTSS","SUSE SUSE Linux Enterprise Server 15 SP6-LTSS","SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4","SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5","SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6","SUSE SUSE Manager Proxy LTS 4.3","SUSE SUSE Manager Retail Branch Server LTS 4.3","SUSE SUSE Manager Server LTS 4.3"],"affected":[{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.3:latest","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.3:latest","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.4:latest","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.4:latest","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro/5.5:latest","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro/5.5:latest","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-Azure","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-Azure","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-EC2","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-EC2","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-GCE","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-GCE","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-Azure","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-Azure","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-EC2","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-EC2","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-GCE","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-GCE","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-GCE","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-GCE","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Desktop 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Desktop 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Desktop 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Module for Basesystem 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Module for Basesystem 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Module for Basesystem 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.4","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.4","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.5","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.5","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP4-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP4-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP4-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP5-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP5-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP5-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP6-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP6-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP6-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Proxy LTS 4.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Proxy LTS 4.3","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Proxy LTS 4.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Retail Branch Server LTS 4.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Retail Branch Server LTS 4.3","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Retail Branch Server LTS 4.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Server LTS 4.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Server LTS 4.3","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Server LTS 4.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]}],"references":["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-41054","http://www.openwall.com/lists/oss-security/2026/05/19/3","http://www.openwall.com/lists/oss-security/2026/05/19/4","http://www.openwall.com/lists/oss-security/2026/05/19/5","http://www.openwall.com/lists/oss-security/2026/05/20/1","http://www.openwall.com/lists/oss-security/2026/05/21/17","http://www.openwall.com/lists/oss-security/2026/05/22/1","https://lists.debian.org/debian-lts-announce/2026/06/msg00005.html"],"weaknesses":["CWE-305"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/41xxx/CVE-2026-41054.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-41054","state":"PUBLISHED","datePublished":"2026-05-20T08:56:14.466Z","dateUpdated":"2026-06-05T11:06:34.200Z","assignerShortName":"suse","assignerOrgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","dateReserved":"2026-04-16T13:37:50.680Z"},"containers":{"cna":{"title":"Missing exit out of permission check in haveged could lead to root exploit","descriptions":[{"lang":"en","value":"In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`."}],"affected":[{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.3:latest","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.3:latest","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.4:latest","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro-rancher/5.4:latest","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro/5.5:latest","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Container suse/sle-micro/5.5:latest","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-Azure","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-Azure","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-EC2","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-EC2","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-GCE","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-BYOS-GCE","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-Azure","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-Azure","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-EC2","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-EC2","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-GCE","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-BYOS-GCE","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-GCE","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"Image SLES15-SP4-SAP-Hardened-GCE","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Desktop 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Desktop 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Desktop 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Module for Basesystem 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Module for Basesystem 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Module for Basesystem 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.4","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.4","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.5","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Micro 5.5","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP4-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP4-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP4-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP5-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP5-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP5-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP6-LTSS","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP6-LTSS","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server 15 SP6-LTSS","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150600.11.6.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Proxy LTS 4.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Proxy LTS 4.3","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Proxy LTS 4.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Retail Branch Server LTS 4.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Retail Branch Server LTS 4.3","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Retail Branch Server LTS 4.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Server LTS 4.3","packageName":"haveged","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Server LTS 4.3","packageName":"haveged-devel","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]},{"vendor":"SUSE","product":"SUSE Manager Server LTS 4.3","packageName":"libhavege2","defaultStatus":"unaffected","versions":[{"version":"?","status":"affected","lessThan":"1.9.14-150400.3.11.1","versionType":"custom"}]}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-41054"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-305","lang":"en","description":"CWE-305: Authentication Bypass by Primary Weakness","type":"CWE"}]}],"providerMetadata":{"shortName":"suse","orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","dateUpdated":"2026-05-20T08:56:14.466Z"},"credits":[{"lang":"en","value":"Dirk Mueller of SUSE","type":"finder"}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/05/19/3"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/19/4"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/19/5"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/20/1"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/21/17"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/22/1"},{"url":"https://lists.debian.org/debian-lts-announce/2026/06/msg00005.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2026-06-05T11:06:34.200Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-20T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-41054"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-21T03:55:33.848Z"}}]}}}