Netatalk Non-Reentrant Privilege Toggle Vulnerability

A non-reentrant privilege toggle vulnerability has been identified in Netatalk versions 2.2.5 prior to 4.4.2. This vulnerability arises because privilege switching relies on shared global state without proper synchronization, making it unsafe for nested or concurrent use. While the Netatalk team has not found a credible method for remote privilege escalation through normal afpd request handling, this vulnerability undermines the robustness of privilege management.

Impact

Exploitation of this vulnerability could lead to improper privilege management, potentially allowing for unauthorized privilege escalation in concurrent or nested scenarios.

Remediation

Users can upgrade to Netatalk version 4.5.0 or later, which includes the necessary patch. Alternatively, apply the CVE-2026-44059,CVE-2026-7835.patch to a Netatalk 4.4.2 source tree to hotfix the vulnerability.