PT-2026-61069 · Linux · Linux

CVE-2026-53367 · Published 2026-07-19 · Updated 2026-07-19

NVD

In the Linux kernel, the following vulnerability has been resolved:

selinux: fix avdcache auditing

The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc audit required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check.

[PM: line wrap tweaks]

Related Identifiers

CVE-2026-53367

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-53367 · Security Note
• https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217 · Note
• https://git.kernel.org/stable/c/e3e722ea88e051ae5361dc540c01ba18f87b5ffd · Note
• https://git.kernel.org/stable/c/bce6a32bc888dfebb6a7d4dee454228b71ed8369 · Note