Riskcovery

CVE-2026-53367

selinux: fix avdcache auditing

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Jul 19, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: fix avdcache auditing

The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check.

[PM: line wrap tweaks]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b to before e3e722ea88e051ae5361dc540c01ba18f87b5ffdAffected
  • dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b to before bce6a32bc888dfebb6a7d4dee454228b71ed8369Affected
  • dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b to before f92d542577db878acfd21cc18dab23d03023b217Affected
  • 21879b76831fab52f6a615c531f86412c8d3c827Affected
  • 6.17.10 to before 6.18Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.