CVE-2011-4099: The capsh program in libcap before 2.22 does not change the current working directory when the --chroot opt...

Security readout for executives and security teams

CVE-2011-4099 affects libcap's capsh utility before version 2.22. When capsh is used with --chroot, it may leave the process in the original working directory, allowing a local user to bypass intended chroot confinement. This matters mainly where chroot is relied on as a security boundary. Exposure is likely limited to systems with libcap capsh before 2.22 where local users can invoke or influence capsh --chroot workflows. General exposure cannot be confirmed from the bundle because affected distributions and package versions are not enumerated beyond libcap before 2.22 and Red Hat advisory references. Treat this as a targeted remediation item, not an emergency internet-wide issue. Prioritize multi-user Linux systems, legacy Red Hat-derived environments, and any workload depending on capsh chroot isolation for containment. Mitigation focus: Upgrade libcap to version 2.22 or a vendor-fixed package where applicable.; Review Red Hat RHSA-2011:1694 if using affected Red Hat packages.; Check current vendor guidance for supported backported fixes..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.