Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
Red Hat bootupd and rust-bootupd may allow privilege escalation
published 27 days ago
Summary
The bootupd and rust-bootupd components used in Red Hat hardened images contain bugs that could let an attacker increase their access rights on a system. This could lead to unauthorized changes or control of the server. Apply the latest Red Hat package updates for these components as soon as possible to close the gap.
What to do
- Update redhat bootupd to version 0:0.2.36-3.hum1.
- Update redhat rust-bootupd to version 0:0.2.36-3.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | bootupd |
< 0:0.2.36-3.hum1 Fix: upgrade to 0:0.2.36-3.hum1
|
| Red Hat:hummingbird:1 | redhat | rust-bootupd |
< 0:0.2.36-3.hum1 Fix: upgrade to 0:0.2.36-3.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:59260 Vendor Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-75803 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59260.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523425 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-75803 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-75803 Vendor Advisory
- https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba... Third Party Advisory
- https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e0... Third Party Advisory
- https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d... Third Party Advisory
- https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f... Third Party Advisory
- https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865... Third Party Advisory
- https://openssl-library.org/news/secadv/20260825.txt Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Sep 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2026:59260 · OSV
Track software like this
Free during beta