Medium [CVE-2026-54371] Symlink Traversal Privilege Escalation via getfattr and setfattr

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal.

Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path. A flaw was found in the `attr` package.

This Moderate severity flaw in the `getfattr` utility allows a local attacker to achieve privilege escalation. Red Hat severity: Moderate — CVSS 6.3 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).

Weakness: CWE-59.

Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Cert Manager support for Red Hat OpenShift release 1.19; Red Hat Discovery 2; Red Hat Hardened Images; Red Hat Update Infrastructure 5; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat OpenShift Container Platform 4.

Red Hat fixing advisory: RHSA-2026:59380, RHSA-2026:56133, RHSA-2026:60226, RHSA-2026:63135, RHSA-2026:63138, RHSA-2026:61783, RHSA-2026:34889, RHSA-2026:66018.

Affected products named by the advisory: Red Hat package: attr.