cve 2026 41054

CVE-2026-41054 is a local privilege-escalation vulnerability in the Linux haveged entropy daemon, fixed in haveged 1.9.21. The flaw allows unprivileged users to reach privileged daemon commands due to a failed root-only command-socket permission check. While not a remote wormable issue, it poses a risk in mixed Windows and Linux environments where Linux daemons run via WSL, containers, or cloud images. For WindowsForum readers, the key takeaway is the importance of patching haveged to prevent local root escalation from a low-privilege foothold. The tag covers this specific CVE, its impact on hybrid IT estates, and the associated patch guidance.