CVE-2026-73584
published 2026-08-13CVE-2026-73584: A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary…
PriorityP434medium6.3CVSS 3.1
AVLACHPRLUINSUCNIHAH
EPSS
0.13%
2.1th percentile
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| standards_based_linux_instrumentation | sblim-sfcb | — | — |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SBLIM sblim-sfcb File temp file
vuldb·2026-08-25·CVSS 6.3
CVE-2026-73584 [MEDIUM] SBLIM sblim-sfcb File temp file
A vulnerability classified as very critical has been found in SBLIM sblim-sfcb. This impacts an unknown function of the component File Handler. Performing a manipulation results in insecure temporary file.
This vulnerability is cataloged as CVE-2026-73584. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
A flaw was found in sblim-sfcb.
ghsa_unreviewed·2026-08-13
CVE-2026-73584 [MEDIUM] CWE-377 A flaw was found in sblim-sfcb.
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.
Red Hat
sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling
vendor_redhat·2026-08-13·CVSS 6.3
CVE-2026-73584 [MEDIUM] CWE-377 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling
sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp` directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. This can lead to privileged file corruption or a denial of service (DoS) on the system.
Statement: This Moderate impact flaw in `sblim-sfcb` allows a local attacker to achieve privileged file corruption or denial of service through a time-of-check-to-time-of-use (TOCTOU) race condition. Exploitation requires a local low-privileged user to win a race during privileged `sfcbrepos` instance
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-73584 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling [fedora-all]
bugzilla·2026-08-13·CVSS 6.3
CVE-2026-73584 [MEDIUM] CVE-2026-73584 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling [fedora-all]
CVE-2026-73584 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: sblim-sfcb-1.4.9-36.el10
Summary: Insecure temporary file in /tmp allows symlink overwrite
(sfcbinst.mof): a local attacker can win a TOCTOU race on
`/tmp/sfcbinst.mof` during privileged instance migration and redirect
appended MOF output into an attacker-chosen file, causing privileged file
corruption or denial of service.
Requirements to exploit: A local low-privileged user on the same host, the
ability to
Bugzilla
CVE-2026-73584 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling
bugzilla·2026-04-26·CVSS 6.3
CVE-2026-73584 [MEDIUM] CVE-2026-73584 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling
CVE-2026-73584 sblim-sfcb: sblim-sfcb: Privileged file corruption and denial of service via insecure temporary file handling
AI_ONLY_REPORT
package: sblim-sfcb-1.4.9-36.el10
Summary: Insecure temporary file in /tmp allows symlink overwrite
(sfcbinst.mof): a local attacker can win a TOCTOU race on
`/tmp/sfcbinst.mof` during privileged instance migration and redirect
appended MOF output into an attacker-chosen file, causing privileged file
corruption or denial of service.
Requirements to exploit: A local low-privileged user on the same host, the
ability to repeatedly recreate `/tmp/sfcbinst.mof` as a symlink after it is
removed, a privileged `sfcbrepos` execution, instance migration left
enabled (no `-i`), and a `repository.previous//` directory
containing at least one static instance file
2026-08-13
Published