AZL-82425
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82425.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-82425
- Upstream
- Published
- 2026-04-09T16:16:31Z
- Modified
- 2026-08-31T05:26:27Z
- Summary
- CVE-2026-4878 affecting package libcap for versions less than 2.69-14
- Details
-
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the
cap_set_file()function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation. - References