CVE-2026-73584: Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-13 · updated 2026-08-25
Weakness: CWE-377

Description

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.

Affected products

Red Hat Enterprise Linux: 6.0, 7.0, 8.0, 9.0, 10.0

References

https://access.redhat.com/security/cve/CVE-2026-73584
https://bugzilla.redhat.com/show_bug.cgi?id=2462721

Get alerted when CVE-2026-73584 or the next vulnerability affects your stack