{"id":55778,"date":"2026-05-20T06:46:50","date_gmt":"2026-05-20T06:46:50","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=55778"},"modified":"2026-05-20T06:46:50","modified_gmt":"2026-05-20T06:46:50","slug":"missing-exit-out-of-permission-check-in-haveged-could-lead-to-root-exploit","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=55778","title":{"rendered":"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054"},"content":{"rendered":"

{“lastseen”:””,”description”:”In `src\/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\\\\0\/sys\/entropy\/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASCII_NAK`), it **fails to stop execution**. The code proceeds to the `switch` statement, allowing any local unprivileged user to execute privileged commands such as `MAGIC_CHROOT`.”,”published”:”2026-05-20T08:56:14.466Z”,”modified”:”2026-05-20T09:09:33.506Z”,”type”:”cve”,”title”:”Missing exit out of permission check in haveged could lead to root exploit”,”source”:”suse”,”references”:”https:\/\/bugzilla.suse.com\/show_bug.cgi?id=CVE-2026-41054″,”id”:”CVE-2026-41054″,”bulletinFamily”:””,”cwe”:[“CWE-305″],”cvelist”:null,”sourceData”:”SUSE Container suse\/sle-micro-rancher\/5.3:latest ?\\nSUSE Container suse\/sle-micro-rancher\/5.3:latest ?\\nSUSE Container suse\/sle-micro-rancher\/5.4:latest ?\\nSUSE Container suse\/sle-micro-rancher\/5.4:latest ?\\nSUSE Container suse\/sle-micro\/5.5:latest ?\\nSUSE Container suse\/sle-micro\/5.5:latest ?\\nSUSE Image SLES15-SP4-SAP-BYOS ?\\nSUSE Image SLES15-SP4-SAP-BYOS ?\\nSUSE Image SLES15-SP4-SAP-BYOS-Azure ?\\nSUSE Image SLES15-SP4-SAP-BYOS-Azure ?\\nSUSE Image SLES15-SP4-SAP-BYOS-EC2 ?\\nSUSE Image SLES15-SP4-SAP-BYOS-EC2 ?\\nSUSE Image SLES15-SP4-SAP-BYOS-GCE ?\\nSUSE Image SLES15-SP4-SAP-BYOS-GCE ?\\nSUSE Image SLES15-SP4-SAP-Hardened ?\\nSUSE Image SLES15-SP4-SAP-Hardened ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS-Azure ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS-Azure ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS-EC2 ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS-EC2 ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS-GCE ?\\nSUSE Image SLES15-SP4-SAP-Hardened-BYOS-GCE ?\\nSUSE Image SLES15-SP4-SAP-Hardened-GCE ?\\nSUSE Image SLES15-SP4-SAP-Hardened-GCE ?\\nSUSE SUSE Linux Enterprise Desktop 15 SP7 ?\\nSUSE SUSE Linux Enterprise Desktop 15 SP7 ?\\nSUSE SUSE Linux Enterprise Desktop 15 SP7 ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP7 ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP7 ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP7 ?\\nSUSE SUSE Linux Enterprise Module for Basesystem 15 SP7 ?\\nSUSE SUSE Linux Enterprise Module for Basesystem 15 SP7 ?\\nSUSE SUSE Linux Enterprise Module for Basesystem 15 SP7 ?\\nSUSE SUSE Linux Enterprise Server 15 SP7 ?\\nSUSE SUSE Linux Enterprise Server 15 SP7 ?\\nSUSE SUSE Linux Enterprise Server 15 SP7 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP7 ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ?\\nSUSE SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ?\\nSUSE SUSE Linux Enterprise Micro 5.3 ?\\nSUSE SUSE Linux Enterprise Micro 5.3 ?\\nSUSE SUSE Linux Enterprise Micro 5.4 ?\\nSUSE SUSE Linux Enterprise Micro 5.4 ?\\nSUSE SUSE Linux Enterprise Micro 5.5 ?\\nSUSE SUSE Linux Enterprise Micro 5.5 ?\\nSUSE SUSE Linux Enterprise Server 15 SP4-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP4-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP4-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP5-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP5-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP5-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP6-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP6-LTSS ?\\nSUSE SUSE Linux Enterprise Server 15 SP6-LTSS ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6 ?\\nSUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6 ?\\nSUSE SUSE Manager Proxy LTS 4.3 ?\\nSUSE SUSE Manager Proxy LTS 4.3 ?\\nSUSE SUSE Manager Proxy LTS 4.3 ?\\nSUSE SUSE Manager Retail Branch Server LTS 4.3 ?\\nSUSE SUSE Manager Retail Branch Server LTS 4.3 ?\\nSUSE SUSE Manager Retail Branch Server LTS 4.3 ?\\nSUSE SUSE Manager Server LTS 4.3 ?\\nSUSE SUSE Manager Server LTS 4.3 ?\\nSUSE SUSE Manager Server LTS 4.3 ?”,”sourceHref”:””,”cvss”:{“score”:7.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Container suse\/sle-micro-rancher\/5.3:latest”,”version”:”?”,”vendor”:”SUSE”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"

{“lastseen”:””,”description”:”In `src\/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\\\\0\/sys\/entropy\/haveged`). However, while it detects if the connecting user is not…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,28,12,15,13,7,11,5],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-78","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nMissing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=55778\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{“lastseen”:””,”description”:”In `src\/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\\0\/sys\/entropy\/haveged`). However, while it detects if the connecting user is not...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=55778\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-20T06:46:50+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054\",\"datePublished\":\"2026-05-20T06:46:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778\"},\"wordCount\":781,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-7.8\",\"exploit\",\"HIGH\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=55778#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778\",\"name\":\"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-05-20T06:46:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=55778\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=55778#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=55778","og_locale":"en_US","og_type":"article","og_title":"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054 - zero redgem","og_description":"{“lastseen”:””,”description”:”In `src\/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\\0\/sys\/entropy\/haveged`). However, while it detects if the connecting user is not...","og_url":"https:\/\/zero.redgem.net\/?p=55778","og_site_name":"zero redgem","article_published_time":"2026-05-20T06:46:50+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=55778#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=55778"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054","datePublished":"2026-05-20T06:46:50+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=55778"},"wordCount":781,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-7.8","exploit","HIGH","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=55778#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=55778","url":"https:\/\/zero.redgem.net\/?p=55778","name":"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-05-20T06:46:50+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=55778#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=55778"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=55778#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"Missing exit out of permission check in haveged could lead to root exploit_CVE-2026-41054"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=55778"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}