Red Hat Libuser Race Condition Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 26/08/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| libuser | ≥ 0.60, < 0.60-7< 0.56.13-8 | 0.60-70.56.13-8 |
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free