Driver Pack For Linux Os
Monthly
Code execution can be achieved through an uncontrolled search path in Dell Server Update Utility (SUU) and its bundled Driver Packs for Windows and Linux at all versions prior to 26.07.01, which load libraries from locations an attacker may be able to control (CWE-427). Exploitation is local and not remotely reachable: per the CVSS vector (AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) an attacker must already hold low-privileged local access, must be able to plant a malicious library in a directory the utility searches, and must wait for a higher-privileged user or administrator to subsequently run SUU so the planted code loads with that user's privileges. No public exploit code was identified and the flaw is not confirmed as actively exploited (not in CISA KEV); Dell has released a fixed version, 26.07.01, via advisory DSA-2026-422.
Code execution can be achieved through an uncontrolled search path in Dell Server Update Utility (SUU) and its bundled Driver Packs for Windows and Linux at all versions prior to 26.07.01, which load libraries from locations an attacker may be able to control (CWE-427). Exploitation is local and not remotely reachable: per the CVSS vector (AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) an attacker must already hold low-privileged local access, must be able to plant a malicious library in a directory the utility searches, and must wait for a higher-privileged user or administrator to subsequently run SUU so the planted code loads with that user's privileges. No public exploit code was identified and the flaw is not confirmed as actively exploited (not in CISA KEV); Dell has released a fixed version, 26.07.01, via advisory DSA-2026-422.