Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 561
Alerts This Week
Warning Icon 1 561

Oracle Linux 8 acl Important Symlink Escalation Threat ELSA-2026-43420

oracle
Calendar Grey July 28, 2026
Scroller Oracle
Updated Oracle Linux 8 packages address critical security issues with access control and privilege escalation vulnerabilities.
Oracle Linux 8 has received an update that addresses two CVEs related to symlink traversal privilege escalation by releasing new RPM packages for various architectures.

Summary

[2.4.0-1] - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)

Topics%20covered

Topics Covered

security advisory privilege escalation access control filesystem symlink Oracle

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates/acl-2.4.0-1.el8_10.src.rpm

x86_64

acl-2.4.0-1.el8_10.x86_64.rpm libacl-2.4.0-1.el8_10.i686.rpm libacl-2.4.0-1.el8_10.x86_64.rpm libacl-devel-2.4.0-1.el8_10.i686.rpm libacl-devel-2.4.0-1.el8_10.x86_64.rpm

aarch64

acl-2.4.0-1.el8_10.aarch64.rpm libacl-2.4.0-1.el8_10.aarch64.rpm libacl-devel-2.4.0-1.el8_10.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-54369 CVE-2026-54370

Topics%20covered

Topics Covered

security advisory privilege escalation access control filesystem symlink Oracle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.