Skip to content

CVEs Search About

synced 6 MIN AGOT-6M

01 Record indexIDX: —

02 Records

FEED: ACQUIRING

About Terms Privacy Cookies

CVE™ Copyright © 1999-2026 and CWE™ Copyright © 2006-2026, The MITRE Corporation. Licence text and source attribution on our Terms of Use. This product uses the NVD API but is not endorsed or certified by the NVD. CVSS is owned by FIRST.Org, Inc. and used by permission.

SRC: CVELISTV5 / SYNC: T-6M / LAG: 22M / REC: 386,851 / REV: C6-1C / V4

01 RecordSTATE: PUBLISHED

CVE-2026-41054

Missing exit out of permission check in haveged could lead to root exploit

HighPUBLISHEDCNA: suse

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

02 Description

CNA: suse

Missing exit out of permission check in haveged could lead to root exploit

03 Exploitation and scoring

SRC: CISA, FIRST, NVD, RED HAT

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.18% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 8.3% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-07-24.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

SCHEMA: 5.2

Published

2026-05-20 08:56Z3 MO AGO

Last updated

2026-06-05 11:06Z3 MO AGO

Reserved

2026-04-16

Assigning CNA

suse

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-305Authentication Bypass by Primary WeaknessBase

Data version

5.2

Document digest

d26f44d6cb59effa4e8296d50d2abf850e40e7905386f4ec26e512180a9125ac

05 Affected products

PAIRS: 34

VendorProductVersionsPlatforms

SUSEContainer suse/sle-micro-rancher/5.3:latest? to < 1.9.14-150400.3.11.1—

SUSEContainer suse/sle-micro-rancher/5.4:latest? to < 1.9.14-150400.3.11.1—

SUSEContainer suse/sle-micro/5.5:latest? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-BYOS? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-BYOS-Azure? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-BYOS-EC2? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-BYOS-GCE? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-Hardened? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-Hardened-BYOS? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-Hardened-BYOS-Azure? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-Hardened-BYOS-EC2? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-Hardened-BYOS-GCE? to < 1.9.14-150400.3.11.1—

SUSEImage SLES15-SP4-SAP-Hardened-GCE? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Desktop 15 SP7? to < 1.9.14-150600.11.6.1—

SUSESUSE Linux Enterprise High Performance Computing 15 SP7? to < 1.9.14-150600.11.6.1—

SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to < 1.9.14-150600.11.6.1—

SUSESUSE Linux Enterprise Server 15 SP7? to < 1.9.14-150600.11.6.1—

SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to < 1.9.14-150600.11.6.1—

SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Micro 5.3? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Micro 5.4? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Micro 5.5? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to < 1.9.14-150600.11.6.1—

SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to < 1.9.14-150400.3.11.1—

SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to < 1.9.14-150600.11.6.1—

SUSESUSE Manager Proxy LTS 4.3? to < 1.9.14-150400.3.11.1—

SUSESUSE Manager Retail Branch Server LTS 4.3? to < 1.9.14-150400.3.11.1—

SUSESUSE Manager Server LTS 4.3? to < 1.9.14-150400.3.11.1—

06 References

REFS: 8

bugzilla.suse.comhttps://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-41054
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/19/3
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/19/4
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/19/5
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/20/1
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/21/17
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/22/1
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2026/06/msg00005.html