Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libcap2 Privilege Escalation Risk
published 6 months ago
Summary
The libcap2 library fails to properly handle file updates, allowing a local attacker to potentially inject or remove security settings from any executable, giving them more access to the system than they should have. This could allow them to gain unauthorized access to sensitive areas of the system. To protect against this, update libcap2 to the latest version available.
What to do
- Update canonical libcap2 to version 1:2.44-1ubuntu0.22.04.3.
- Update canonical libcap2 to version 1:2.66-5ubuntu2.4.
- Update canonical libcap2 to version 1:2.75-7ubuntu2.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | libcap2 |
< 1:2.44-1ubuntu0.22.04.3 Fix: upgrade to 1:2.44-1ubuntu0.22.04.3
|
| Ubuntu:24.04:LTS | canonical | libcap2 |
< 1:2.66-5ubuntu2.4 Fix: upgrade to 1:2.66-5ubuntu2.4
|
| Ubuntu:25.10 | canonical | libcap2 |
< 1:2.75-7ubuntu2.2 Fix: upgrade to 1:2.75-7ubuntu2.2
|
Original advisory text
libcap2 vulnerability
Ali Raza discovered that libcap incorrectly handled file capability
updates. A local attacker could possibly use this issue to inject or strip
capabilities into arbitrary executables and escalate privileges.
updates. A local attacker could possibly use this issue to inject or strip
capabilities into arbitrary executables and escalate privileges.
References
- https://ubuntu.com/security/notices/USN-8193-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-4878 Third Party Advisory
Timeline
Published21 Apr 2026
Updated29 Apr 2026
First seen29 Apr 2026
Sources
USN-8193-1 · OSV
Track software like this
Free during beta