CVE-2026-91142

A flaw was found in Cockpit. An authenticated local user with a large user identifier (UID) can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entries of other accounts.

This vulnerability is rated as having Low severity because exploitation requires an atypical combination of strict preconditions: the binary must run in a 32-bit (ILP32) environment, an authenticated user must already possess access, and the system must assign an abnormally large user identifier. Standard Red Hat Enterprise Linux server deployments run on 64-bit architectures where this arithmetic wraparound condition does not occur. Furthermore, the blast radius is strictly confined to reading or modifying legacy login accounting records without enabling privilege escalation, arbitrary code execution, or service denial.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.