QSN-8691-1: attr vulnerability
2026-08-31

Summary:
attr could allow a local attacker to gain elevated privileges.

Details:
It was discovered that attr incorrectly handled symbolic links while
traversing directory paths. A local attacker who controlled a pathname
component could possibly use this issue to redirect privileged attr
operations to arbitrary files and gain elevated privileges.

Affected QuantaStor releases:
  6.9.1.001 jammy: attr 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.9.1.001 jammy: libattr1 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.9.1.001 jammy: libattr1-dev 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.9.0.464 jammy: attr 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.9.0.464 jammy: libattr1 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.9.0.464 jammy: libattr1-dev 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.6.015 jammy: attr 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.6.015 jammy: libattr1 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.6.015 jammy: libattr1-dev 1:2.5.1-1ubuntu0.1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.5.018 jammy: attr 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.5.018 jammy: libattr1 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.5.018 jammy: libattr1-dev 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.4.038 jammy: attr 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.4.038 jammy: libattr1 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.4.038 jammy: libattr1-dev 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.3.018 jammy: attr 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.3.018 jammy: libattr1 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.3.018 jammy: libattr1-dev 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.2.002 jammy: attr 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.2.002 jammy: libattr1 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.2.002 jammy: libattr1-dev 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.1.007 jammy: attr 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.1.007 jammy: libattr1 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.1.007 jammy: libattr1-dev 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.0.205 jammy: attr 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.0.205 jammy: libattr1 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)
  6.8.0.205 jammy: libattr1-dev 1:2.5.1-1build1 (fixed in 1:2.5.1-1ubuntu0.1)

CVEs: CVE-2026-54371

References:
  https://ubuntu.com/security/notices/USN-8691-1