Vulnerability in SUSE Container Suse/sle-Micro/5.5:latest
CVE-2026-41054
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (7.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 8th percentile — 7.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- SUSE Container Suse/sle-Micro/5.5:latest
- SUSE Container Suse/sle-Micro-Rancher/5.3:latest
- SUSE Container Suse/sle-Micro-Rancher/5.4:latest
- SUSE Image Sles15-Sp4-Sap-Byos
- SUSE Image Sles15-Sp4-Sap-Byos-Azure
- SUSE Image Sles15-Sp4-Sap-Byos-Ec2
- SUSE Image Sles15-Sp4-Sap-Byos-Gce
- SUSE Image Sles15-Sp4-Sap-Hardened
- SUSE Image Sles15-Sp4-Sap-Hardened-Byos
- SUSE Image Sles15-Sp4-Sap-Hardened-Byos-Azure
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-41054?
- CVE-2026-41054 is a high-severity vulnerability in SUSE Container Suse/sle-Micro/5.5:latest, classified under Authentication Bypass by Primary Weakness. CVSS score: 7.8/10. Published 2026-05-20.
- How severe is CVE-2026-41054?
- High severity. CVSS v3 base score is 7.8 out of 10.