Red Hat Enterprise Linux/Hardened Images 7/8/9/10 Serial Backend privileges management

Summaryinfo

A vulnerability was found in Red Hat Enterprise Linux and Hardened Images 7/8/9/10. It has been rated as very critical. Affected by this issue is some unknown functionality of the component Serial Backend. Performing a manipulation results in privileges management. This vulnerability is reported as CVE-2026-95511. The attack requires a local approach. No exploit exists.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Red Hat Enterprise Linux and Hardened Images 7/8/9/10. This affects an unknown function of the component Serial Backend. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend. A local user who is a member of the lpadmin group can configure a printer that uses a privileged serial backend. The CUPS scheduler does not restrict the path component of non-file device URIs, so the root-privileged backend can write attacker-controlled print data to an arbitrary file. This can be used to change security-sensitive CUPS configuration and ultimately achieve root code execution. Exploitation requires local lpadmin group membership and a serial backend binary installed with root-only permissions.

It is possible to read the advisory at access.redhat.com. This vulnerability is uniquely identified as CVE-2026-95511 since 09/22/2026. The exploitability is told to be easy. Attacking locally is a requirement. Additional levels of successful authentication are required for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 09/22/2026). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-84335). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Enterprise Linux
• Hardened Images

Version

• 7
• 8
• 9
• 10

License

• commercial

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion