A Time-of-Check Time-of-Use (TOCTOU) race condition in libcap's `cap_set_file()` function (CVE-2026-4878, CVSS 6.7) can allow local privilege escalation. The vulnerability affects libcap_project libcap up to the unspecified patched version, as well as multiple Red Hat Enterprise Linux versions including 8.0, 9.0, and 10.0. Red Hat has released patched packages, such as libcap-2.48-9.el9_4.1 for RHEL 9.4, to address this issue.
Red Hat Product Errata RHSA-2026:20595 - Security Advisory Issued: 2026-05-26 Updated: 2026-05-26 RHSA-2026:20595 - Security Advisory Overview Updated Packages Synopsis Important: libcap security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libcap is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64 Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2451615 - CVE-2026-4878 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() CVEs CVE-2026-4878 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee x86_64 libcap-2.48-9.el9_4.1.i686.rpm SHA-256: 24be1c17169bcbb170df90c9bcb01a1e546cffd12848b46c75b00dbce09806ff libcap-2.48-9.el9_4.1.x86_64.rpm SHA-256: 6f4278d53aea74a402e21db4412150a4ff7a3a6a310b5321119519d42a152f82 libcap-debuginfo-2.48-9.el9_4.1.i686.rpm SHA-256: fe04c86fd7c0105d164de81a58ad600eed57eb9d11aa736b40f3de88cb3aa017 libcap-debuginfo-2.48-9.el9_4.1.i686.rpm SHA-256: fe04c86fd7c0105d164de81a58ad600eed57eb9d11aa736b40f3de88cb3aa017 libcap-debuginfo-2.48-9.el9_4.1.x86_64.rpm SHA-256: 7079c4827a6460a5438fd1d38f9787f285fb83025db258a4de6466e8b0446b1f libcap-debuginfo-2.48-9.el9_4.1.x86_64.rpm SHA-256: 7079c4827a6460a5438fd1d38f9787f285fb83025db258a4de6466e8b0446b1f libcap-debugsource-2.48-9.el9_4.1.i686.rpm SHA-256: 170b6e43c1c35187792d6a8e8f75c5e7f13a86ebd25ef651cd2bdb4e55f6ffda libcap-debugsource-2.48-9.el9_4.1.i686.rpm SHA-256: 170b6e43c1c35187792d6a8e8f75c5e7f13a86ebd25ef651cd2bdb4e55f6ffda libcap-debugsource-2.48-9.el9_4.1.x86_64.rpm SHA-256: 39320cefe43a881f7a4aa59d984c5a8e5abde80bf4afb43d066bafe1821e70da libcap-debugsource-2.48-9.el9_4.1.x86_64.rpm SHA-256: 39320cefe43a881f7a4aa59d984c5a8e5abde80bf4afb43d066bafe1821e70da libcap-devel-2.48-9.el9_4.1.i686.rpm SHA-256: 2d31e8329bc75bbfc096a1e9f87d903002d9dfe8aab2eca7a65e81321467e6cb libcap-devel-2.48-9.el9_4.1.x86_64.rpm SHA-256: 465e2516457da6e1ccbf41b9416f617fcfb3798390685f58f9293bc6cdce0185 Red Hat Enterprise Linux Server - AUS 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee x86_64 libcap-2.48-9.el9_4.1.i686.rpm SHA-256: 24be1c17169bcbb170df90c9bcb01a1e546cffd12848b46c75b00dbce09806ff libcap-2.48-9.el9_4.1.x86_64.rpm SHA-256: 6f4278d53aea74a402e21db4412150a4ff7a3a6a310b5321119519d42a152f82 libcap-debuginfo-2.48-9.el9_4.1.i686.rpm SHA-256: fe04c86fd7c0105d164de81a58ad600eed57eb9d11aa736b40f3de88cb3aa017 libcap-debuginfo-2.48-9.el9_4.1.i686.rpm SHA-256: fe04c86fd7c0105d164de81a58ad600eed57eb9d11aa736b40f3de88cb3aa017 libcap-debuginfo-2.48-9.el9_4.1.x86_64.rpm SHA-256: 7079c4827a6460a5438fd1d38f9787f285fb83025db258a4de6466e8b0446b1f libcap-debuginfo-2.48-9.el9_4.1.x86_64.rpm SHA-256: 7079c4827a6460a5438fd1d38f9787f285fb83025db258a4de6466e8b0446b1f libcap-debugsource-2.48-9.el9_4.1.i686.rpm SHA-256: 170b6e43c1c35187792d6a8e8f75c5e7f13a86ebd25ef651cd2bdb4e55f6ffda libcap-debugsource-2.48-9.el9_4.1.i686.rpm SHA-256: 170b6e43c1c35187792d6a8e8f75c5e7f13a86ebd25ef651cd2bdb4e55f6ffda libcap-debugsource-2.48-9.el9_4.1.x86_64.rpm SHA-256: 39320cefe43a881f7a4aa59d984c5a8e5abde80bf4afb43d066bafe1821e70da libcap-debugsource-2.48-9.el9_4.1.x86_64.rpm SHA-256: 39320cefe43a881f7a4aa59d984c5a8e5abde80bf4afb43d066bafe1821e70da libcap-devel-2.48-9.el9_4.1.i686.rpm SHA-256: 2d31e8329bc75bbfc096a1e9f87d903002d9dfe8aab2eca7a65e81321467e6cb libcap-devel-2.48-9.el9_4.1.x86_64.rpm SHA-256: 465e2516457da6e1ccbf41b9416f617fcfb3798390685f58f9293bc6cdce0185 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee s390x libcap-2.48-9.el9_4.1.s390x.rpm SHA-256: ec99f1840148d5f769d21edd86a7e6065212c8064d5579c6e369644673acb398 libcap-debuginfo-2.48-9.el9_4.1.s390x.rpm SHA-256: 83c7ff61509207ff5b2a30edfe19297c6d24f7c81d56b4a6fe1043b60ca0136e libcap-debuginfo-2.48-9.el9_4.1.s390x.rpm SHA-256: 83c7ff61509207ff5b2a30edfe19297c6d24f7c81d56b4a6fe1043b60ca0136e libcap-debugsource-2.48-9.el9_4.1.s390x.rpm SHA-256: 3c560404f8c72952febd0db0b62496992219b537b667fdd28a1c9a380ce983bd libcap-debugsource-2.48-9.el9_4.1.s390x.rpm SHA-256: 3c560404f8c72952febd0db0b62496992219b537b667fdd28a1c9a380ce983bd libcap-devel-2.48-9.el9_4.1.s390x.rpm SHA-256: b23f76fb62a9d6f92d43ebf89625ed3aca7dae013597e757b17ba9193520307c Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee ppc64le libcap-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 1443a8789afbda426adada6ccb64b2a1d6107639925db95f0f332ec833ce0b35 libcap-debuginfo-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 5f4dddf1145124ff173f34017cd25b91252b2747635fe97000a185c5f0efed48 libcap-debuginfo-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 5f4dddf1145124ff173f34017cd25b91252b2747635fe97000a185c5f0efed48 libcap-debugsource-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 03ecc0eea4ae36701b2483b040dea6c9c6180c840b2ac354a31e58db8535a1d3 libcap-debugsource-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 03ecc0eea4ae36701b2483b040dea6c9c6180c840b2ac354a31e58db8535a1d3 libcap-devel-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 633fb8e2345c72be7a972932f30d8429cd9419e20203fee53936bc02f38ac6c4 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee aarch64 libcap-2.48-9.el9_4.1.aarch64.rpm SHA-256: 28557736fece8419e50d086e92372c655538e398cf48da3c0dae1a76b89de4ba libcap-debuginfo-2.48-9.el9_4.1.aarch64.rpm SHA-256: 938de02bfa9fd85b692bd2332ddd881dd948ac26980dae5bd769c5f0d8e8a3ed libcap-debuginfo-2.48-9.el9_4.1.aarch64.rpm SHA-256: 938de02bfa9fd85b692bd2332ddd881dd948ac26980dae5bd769c5f0d8e8a3ed libcap-debugsource-2.48-9.el9_4.1.aarch64.rpm SHA-256: 1f3f2642cf146110129efa424067284ebdf3022bde0dc122727d004a96ebd6a6 libcap-debugsource-2.48-9.el9_4.1.aarch64.rpm SHA-256: 1f3f2642cf146110129efa424067284ebdf3022bde0dc122727d004a96ebd6a6 libcap-devel-2.48-9.el9_4.1.aarch64.rpm SHA-256: 5b1ff60b7e5802657db36cbbe7a13d9017e58f3a5005ed8db6270336e2a48bf7 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee ppc64le libcap-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 1443a8789afbda426adada6ccb64b2a1d6107639925db95f0f332ec833ce0b35 libcap-debuginfo-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 5f4dddf1145124ff173f34017cd25b91252b2747635fe97000a185c5f0efed48 libcap-debuginfo-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 5f4dddf1145124ff173f34017cd25b91252b2747635fe97000a185c5f0efed48 libcap-debugsource-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 03ecc0eea4ae36701b2483b040dea6c9c6180c840b2ac354a31e58db8535a1d3 libcap-debugsource-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 03ecc0eea4ae36701b2483b040dea6c9c6180c840b2ac354a31e58db8535a1d3 libcap-devel-2.48-9.el9_4.1.ppc64le.rpm SHA-256: 633fb8e2345c72be7a972932f30d8429cd9419e20203fee53936bc02f38ac6c4 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM libcap-2.48-9.el9_4.1.src.rpm SHA-256: 9c54372f83cdb37edfae17caf6959f97f140e2eee9afe5810f0f24d6b2b69eee x86_64 libcap-2.48-9.el9_4.1.i686.rpm SHA-256: 24be1c17169bcbb170df90c9bcb01a1e546cffd12848b46c75b00dbce09806ff libcap-2.48-9.el9_4.1.x86_64.rpm SHA-256: 6f4278d53aea74a402e21db4412150a4ff7a3a6a310b5321119519d42a152f82 libcap-debuginfo-2.48-9.el9_4.1.i686.rpm SHA-256: fe04c86fd7c0105d164de81a58ad600eed57eb9d11aa736b40f3de88cb3aa017 libcap-debuginfo-2.48-9.el9_4.1.i686.rpm SHA-256: fe04c86fd7c0105d164de81a58ad600eed57eb9d11aa736b40f3de88cb3aa017 libcap-debuginfo-2.48-9.el9_4.1.x86_64.rpm SHA-256: 7079c4827a6460a5438fd1d38f9787f285fb83025db258a4de6466e8