CVE-2026-3836

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Title source: VulnCheck
STIX 2.1 vulnerability

Description

A local, unprivileged attacker can exploit a path traversal flaw in the D-Bus locale configuration, crashing dnf5daemon-server via a crafted string. This can lead to a DoS with a core dump.

Description source: VulnCheck

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jul 31, 2026 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

dnf5

Browse Linux / dnf5
VulnCheckVersion data not supplied