A time‑of‑check time‑of‑use race condition in the abrt‑dbus D‑Bus service’s SetElement method allows any local user to write arbitrary files into a root‑owned dump directory. The flaw bypasses package validation and permits crashes of unpackaged binaries to survive the post‑create processing. The primary impact is the ability to create or overwrite files in directories that normally require root privileges, potentially leading to persistence of modified crash dumps or other unintended data.

The vulnerability affects Red Hat Enterprise Linux 6, 7 and 8 distributions. It requires local user access and targets the abrt‑dbus service component that manages crash dump directories.

The CVSS score of 7.8 reflects substantial risk, with the EPSS score not available and the vulnerability not listed in the CISA KEV catalog. The attack vector is local and relies on a race condition; an attacker must have the ability to invoke SetElement while a dump directory is being created. The likelihood of exploitation depends on the attacker's ability to coordinate the timing, but the presence of a race condition means that the vulnerability can be triggered with sufficient skill, giving it moderate to high exploitability for affected systems.