CVE-2026-53367 Details
Description
In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]
A vulnerability in the Linux kernel's SELinux implementation was introduced by a change that moved the per-task AVC cache to the task's security structure. The vulnerability arises because the cache was incorrectly saving and reusing the audited vector from a previous permission check, rather than recalculating it based on the current permissions requested. This flaw meant that some permission checks, particularly directory write permissions following a cached directory search, were not properly audited. The issue has been fixed by ensuring that the auditing process accurately reflects the current permission requests and distinguishes between denied and allowed cases.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/bce6a32bc888dfebb6a7d4dee454228b71ed8369 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e3e722ea88e051ae5361dc540c01ba18f87b5ffd | kernel.org | Patch |
| https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.17.10, < 6.18 >= 6.18.1, < 6.18.30 >= 6.19, < 7.0.7 6.18 - 6.18 rc7 7.1 rc1 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 29, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |