Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Rocky Linux acl Important Symlink Privilege Escalation RLSA-2026-42736

rocky
Calendar Grey July 22, 2026
Scroller Rockylinux
Important acl security update for Rocky Linux addresses critical symlink-based privilege escalations with CVE-2026-54369 and CVE-2026-54370.
Important: acl security update

Summary

An update is available for acl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory privilege escalation important symlink ACL rocky linux

RPMs

libacl-debuginfo-0:2.4.0-1.el9_8.x86_64.rpm

libacl-devel-0:2.4.0-1.el9_8.aarch64.rpm

libacl-devel-0:2.4.0-1.el9_8.i686.rpm

libacl-devel-0:2.4.0-1.el9_8.ppc64le.rpm

libacl-devel-0:2.4.0-1.el9_8.s390x.rpm

libacl-devel-0:2.4.0-1.el9_8.x86_64.rpm

acl-0:2.4.0-1.el9_8.aarch64.rpm

acl-0:2.4.0-1.el9_8.ppc64le.rpm

acl-0:2.4.0-1.el9_8.s390x.rpm

acl-0:2.4.0-1.el9_8.src.rpm

acl-0:2.4.0-1.el9_8.x86_64.rpm

acl-debuginfo-0:2.4.0-1.el9_8.aarch64.rpm

acl-debuginfo-0:2.4.0-1.el9_8.i686.rpm

acl-debuginfo-0:2.4.0-1.el9_8.ppc64le.rpm

acl-debuginfo-0:2.4.0-1.el9_8.s390x.rpm

acl-debuginfo-0:2.4.0-1.el9_8.x86_64.rpm

acl-debugsource-0:2.4.0-1.el9_8.aarch64.rpm

acl-debugsource-0:2.4.0-1.el9_8.i686.rpm

acl-debugsource-0:2.4.0-1.el9_8.ppc64le.rpm

acl-debugsource-0:2.4.0-1.el9_8.s390x.rpm

acl-debugsource-0:2.4.0-1.el9_8.x86_64.rpm

libacl-0:2.4.0-1.el9_8.aarch64.rpm

libacl-0:2.4.0-1.el9_8.i686.rpm

libacl-0:2.4.0-1.el9_8.ppc64le.rpm

libacl-0:2.4.0-1.el9_8.s390x.rpm

libacl-0:2.4.0-1.el9_8.x86_64.rpm

Read the Full Advisory

References

No references

CVES

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370

Severity
important
Lowest
Low
Medium
High
Critical

Name: RLSA-2026:42736
Affected Products: Rocky Linux 9

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2490277

https://bugzilla.redhat.com/show_bug.cgi?id=2490279


Topics%20covered

Topics Covered

security advisory privilege escalation important symlink ACL rocky linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.