Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-53367

selinux: fix avdcache auditing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b to < e3e722ea88e051ae5361dc540c01ba18f87b5ffdaffected
  • dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b to < bce6a32bc888dfebb6a7d4dee454228b71ed8369affected
  • dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b to < f92d542577db878acfd21cc18dab23d03023b217affected
  • 21879b76831fab52f6a615c531f86412c8d3c827affected
  • 6.17.10 to < 6.18affected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References