CLSA-2026-1791735057
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791735057.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791735057
- Upstream
- Published
- 2026-10-11T16:11:07Z
- Modified
- 2026-10-26T09:31:36Z
- Summary
- flatpak: Fix of CVE-2026-96807
- Details
-
- CVE-2026-96807: regenerate_ld_cache() created and bind-mounted the per-app .ld.so directory by path, and flatpak_switch_symlink_and_remove() swapped its "active" symlink with path-based symlink()/rename()/unlink(), so a sandboxed app could replace ~/.var/app/$APPID/.ld.so with a symlink and have ld.so cache files written at an arbitrary host location; regenerate_ld_cache() now opens the directory with glnx_chase_and_mkdirat(), works on it with *at() syscalls and passes it to bwrap with --bind-fd, and flatpak_switch_symlink_and_remove() takes the directory fd and uses symlinkat()/renameat()/unlinkat()
- Fix flatpak_switch_symlink_and_remove() returning -1 (truthy) instead of FALSE on one error path
- References