[UPDATE] [mittel] Red Hat Enterprise Linux (acl): Mehrere Schwachstellen ermöglichen Privilegieneskalation und Manipulation von Dateien

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen und Daten zu manipulieren.

CSIRTS triage

What: Multiple vulnerabilities allow a local attacker to escalate their privileges and manipulate data.
Who is affected: Local attackers on Red Hat Enterprise Linux systems.
Urgency: Remediation is medium urgency as the vulnerabilities are not currently exploited.
Action: Apply available patches to mitigate the vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Red Hat Enterprise Linux

Get an email when a new Red Hat Enterprise Linux advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-543690.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-543700.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2026-54369	coverage & exploitation status	NVD · CVE.org
CVE-2026-54370	coverage & exploitation status	NVD · CVE.org

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.