CVE-2026-104618
Received Received - Intake

sdbootutil Debug Log Disclosure in SUSE

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: SUSE

Description
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-15
Last Modified
2026-10-15
Generated
2026-10-15
AI Q&A
2026-10-15
EPSS Evaluated
N/A
NVD
CVE-2026-104618
EUVD
EUVD-2026-101945

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
SUSE SUSE Linux Enterprise Server 16.1 ?
SUSE SUSE Linux Enterprise Server for NVIDIA 16.1 ?
SUSE openSUSE Leap 16.1 ?
openSUSE Tumbleweed ?

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability involves the sdbootutil script creating a world-readable debug log file at /var/log/sdbootutil.log. This log file contains sensitive information that can be accessed by any low-privileged user on the system, potentially exposing secrets.

Detection Guidance

Check for the existence of /var/log/sdbootutil.log and verify its permissions. Use 'ls -l /var/log/sdbootutil.log' to confirm if it is world-readable. If present, inspect the file for sensitive data leaks.

Impact Analysis

An attacker with low privileges could read the debug log and extract sensitive data such as passwords, encryption keys, or other confidential information stored in the log. This could lead to further compromise of the system or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage if such data is exposed.

Mitigation Strategies

Remove or restrict access to /var/log/sdbootutil.log by changing its permissions to 600 using 'chmod 600 /var/log/sdbootutil.log'. Alternatively, update the sdbootutil package if a patched version is available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104618. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart