The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1785151263 advisory.

  - acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions     acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers     to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any     component of a pathname processed by a privileged caller can redirect ACL read or write operations to     arbitrary files or directories, enabling unauthorized manipulation of access control lists and local     privilege escalation. (CVE-2026-54369)

  - acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability     that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link     between an lstat() check and subsequent symlink-following operations such as stat(), chown(), chmod(),     acl_get_file(), and acl_set_file(). Attackers who control a pathname component can redirect file access     control list operations to arbitrary files when getfacl, setfacl, or chacl is invoked by a privileged     process over an attacker-controlled path, resulting in local privilege escalation. (CVE-2026-54370)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS Linux 8.4 [TuxCare] Security Update: acl / libacl / libacl-devel Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1785151263)

high Nessus Plugin ID 359611

Version 1.2