Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99129

selinux: fix BPF token permission checks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: selinux: fix BPF token permission checks Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry (in selinux_bpf_token_create()) or the token itself (in selinux_bpf_map_create() and selinux_bpf_prog_load()). Not only does this simplify the code, it avoids potential TOCTOU issues if the user changes the token file descriptor passed into the kernel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5473a722f782f79f96b4691400d681c01fcacc2f to < e1ef306ba20eb13099ca4463527890df67619405affected
  • 5473a722f782f79f96b4691400d681c01fcacc2f to < 77d499e61d36e883a6ad1f10afe05f556aa7e0ccaffected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 7.2.13 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References