Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-59676

Local File Deletion Attack Vector in rm_rf() in seunshare

Description

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SELinuxProject selinux

Default version status: unaffected

  • 0 to ≤ 3.10affected

References