CVE-2026-98413

selinux: always fill AVC decision in avc_has_perm_noaudit()

State: Published
Severity: Not scored
Published: Oct 14, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: always fill AVC decision in avc_has_perm_noaudit()

avc_has_perm_noaudit() is documented to return a copy of the access decision in @avd, but its early return for an empty requested permission set leaves the buffer untouched. All callers pass an uninitialized stack variable and afterwards feed it to avc_audit(), and the inode hook even stores it in the per-task decision cache.

Fill in a deny-all, audit-all decision, similar to avd_init(), so every caller receives a defined value at no cost on the hot path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e6f2f381e4015386a656a369835f949c26000e6b to before c781e737aa0de95289b1774d5fd29388895737a9Affected e6f2f381e4015386a656a369835f949c26000e6b to before e308c5acfe283a66627fc407065626df4ab753ecAffected e6f2f381e4015386a656a369835f949c26000e6b to before f9da796fa238f8e4414ee8481e6c979759a3d563Affected e6f2f381e4015386a656a369835f949c26000e6b to before e77461af13eab5c9a953cc52ec8432cc941d61e2Affected e6f2f381e4015386a656a369835f949c26000e6b to before 5a6f9a872b4ff68877caf998bee352153b7154bcAffected e6f2f381e4015386a656a369835f949c26000e6b to before 24e00850bcff46b984f4c44b92e5499450fcfb5aAffected e6f2f381e4015386a656a369835f949c26000e6b to before 835133337c2ce200db56f62d018c79087dee2603Affected e6f2f381e4015386a656a369835f949c26000e6b to before 8861db305103107199b1426f25fde1fb6d465583Affected
LinuxLinux	5.1Affected before 5.1Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.54 through 6.18.Not affected 7.2.8 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

e6f2f381e4015386a656a369835f949c26000e6b to before c781e737aa0de95289b1774d5fd29388895737a9Affected
e6f2f381e4015386a656a369835f949c26000e6b to before e308c5acfe283a66627fc407065626df4ab753ecAffected
e6f2f381e4015386a656a369835f949c26000e6b to before f9da796fa238f8e4414ee8481e6c979759a3d563Affected
e6f2f381e4015386a656a369835f949c26000e6b to before e77461af13eab5c9a953cc52ec8432cc941d61e2Affected
e6f2f381e4015386a656a369835f949c26000e6b to before 5a6f9a872b4ff68877caf998bee352153b7154bcAffected
e6f2f381e4015386a656a369835f949c26000e6b to before 24e00850bcff46b984f4c44b92e5499450fcfb5aAffected
e6f2f381e4015386a656a369835f949c26000e6b to before 835133337c2ce200db56f62d018c79087dee2603Affected
e6f2f381e4015386a656a369835f949c26000e6b to before 8861db305103107199b1426f25fde1fb6d465583Affected

LinuxLinux

5.1Affected
before 5.1Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.54 through 6.18.*Not affected
7.2.8 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.