CVE-2026-41054

In src/havegecmd.c, the socket_handler function performs a credential check on the abstract UNIX socket (\0/sys/entropy/haveged). However, while it detects if the connecting user is not root (cred.uid != 0) and prepares a negative acknowledgement (ASCII_NAK), it fails to stop execution. The code proceeds to the switch statement, allowing any local unprivileged user to execute privileged commands such as MAGIC_CHROOT.

In src/havegecmd.c, the socket_handler function performs a credential check on the abstract UNIX socket (\0/sys/entropy/haveged). However, while it detects if the connecting user is not root (cred.uid != 0) and prepares a negative acknowledgement (ASCII_NAK), it fails to stop execution. The code proceeds to the switch statement, allowing any local unprivileged user to execute privileged commands such as MAGIC_CHROOT.

In src/havegecmd.c, the socket_handler function performs a credential check on the abstract UNIX socket (\0/sys/entropy/haveged). However, while it detects if the connecting user is not root (cred.uid != 0) and prepares a negative acknowledgement (ASCII_NAK), it fails to stop execution. The code proceeds to the switch statement, allowing any local unprivileged user to execute privileged commands such as MAGIC_CHROOT.

The updated package fixes a security vulnerability: Privilege escalation via command socket. (CVE-2026-41054)

These are all security issues fixed in the haveged-1.9.21-1.1 package on the GA media of openSUSE Tumbleweed.

This update for haveged fixes the following issues:

Changes in haveged:

• CVE-2026-41054: Fixed local privilege escalation via the haveged command socket (bsc#1264086).

This update for haveged fixes the following issue

• CVE-2026-41054: missing exit out of permission check could lead to root exploit (bsc#1264086).

Changes for haveged:

• Improvements on the linux kernel random subsystem have made move forward to socket communication within private network
• Fix 'stop' of service, the daemon in foreground actually see daemon(7) for the rationale. Only 'simple' (default) and the help of udev, as starting services while starved of entropy
• Add ppc64le support
• update to 1.8

• Correct additional run-time test aligment problems on mips.

• haveged 1.7a

• Correct VPATH issues and modify check target to support parallel builds and changes in automake 1.13 test harness.

• Remove all sysvinit compatibility.
• fix powerpc detection
• Current version does support ARM, remove the ExcludeArch need network and can use PrivateNetwork=yes

• Add online tests based on AIS-31
• Fix install target, move to bin and eliminate script if not daemon, now use sysv and systemd templates

• use -F with no arguments in haveged.service
• build with -fpie
• Use Service type 'simple' in systemd unit
• fix build on ia64, s390, s390x
• fix ppc64 build present in old versions have been fixed in different ways.
• run spec cleaner
• Link with full RELRO (-Wl,-z,relro,-z,now)
• add systemd support
• Drop as much capabilitites as possible using libcap-ng
• I meant Enhances not Supplements
• Implement hack to start by default only in VMs
• use O_CLOEXEC on fds
• add proper Requires(pre)
• add a SUSE standard init script

This update for haveged fixes the following issue

• CVE-2026-41054: missing exit out of permission check could lead to root exploit (bsc#1264086).

Changes for haveged:

• Improvements on the linux kernel random subsystem have made move forward to socket communication within private network
• Fix 'stop' of service, the daemon in foreground actually see daemon(7) for the rationale. Only 'simple' (default) and the help of udev, as starting services while starved of entropy
• Add ppc64le support
• update to 1.8

• Correct additional run-time test aligment problems on mips.

• haveged 1.7a

• Correct VPATH issues and modify check target to support parallel builds and changes in automake 1.13 test harness.

• Remove all sysvinit compatibility.
• fix powerpc detection
• Current version does support ARM, remove the ExcludeArch need network and can use PrivateNetwork=yes

• Add online tests based on AIS-31
• Fix install target, move to bin and eliminate script if not daemon, now use sysv and systemd templates

• use -F with no arguments in haveged.service
• build with -fpie
• Use Service type 'simple' in systemd unit
• fix build on ia64, s390, s390x
• fix ppc64 build present in old versions have been fixed in different ways.
• run spec cleaner
• Link with full RELRO (-Wl,-z,relro,-z,now)
• add systemd support
• Drop as much capabilitites as possible using libcap-ng
• I meant Enhances not Supplements
• Implement hack to start by default only in VMs
• use O_CLOEXEC on fds
• add proper Requires(pre)
• add a SUSE standard init script

It was discovered that haveged incorrectly handled credential checks on its control socket. A local attacker could possibly use this issue to execute privileged commands.