CVE-2026-53367 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00166.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/bce6a32bc888dfebb6a7d4dee454228b71ed8369
https://git.kernel.org/stable/c/e3e722ea88e051ae5361dc540c01ba18f87b5ffd
https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217

History

Sun, 19 Jul 2026 09:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]
Title		selinux: fix avdcache auditing
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/bce6a32bc888dfebb6a7d4dee454228b71ed8369 https://git.kernel.org/stable/c/e3e722ea88e051ae5361dc540c01ba18f87b5ffd https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T09:10:28.879Z

Updated: 2026-07-19T09:10:28.879Z

Reserved: 2026-06-09T07:44:35.400Z

Link: CVE-2026-53367

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53367", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.400Z", "datePublished": "2026-07-19T09:10:28.879Z", "dateUpdated": "2026-07-19T09:10:28.879Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-19T09:10:28.879Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: fix avdcache auditing\n\nThe per-task avdcache was incorrectly saving and reusing the\naudited vector computed by avc_audit_required() rather than\nrecomputing based on the currently requested permissions and\ndistinguishing the denied versus allowed cases. As a result,\nsome permission checks were not being audited, e.g.\ndirectory write checks after a previously cached directory\nsearch check.\n\n[PM: line wrap tweaks]"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["security/selinux/hooks.c", "security/selinux/include/objsec.h"], "versions": [{"version": "dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b", "lessThan": "e3e722ea88e051ae5361dc540c01ba18f87b5ffd", "status": "affected", "versionType": "git"}, {"version": "dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b", "lessThan": "bce6a32bc888dfebb6a7d4dee454228b71ed8369", "status": "affected", "versionType": "git"}, {"version": "dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b", "lessThan": "f92d542577db878acfd21cc18dab23d03023b217", "status": "affected", "versionType": "git"}, {"version": "21879b76831fab52f6a615c531f86412c8d3c827", "status": "affected", "versionType": "git"}, {"version": "6.17.10", "lessThan": "6.18", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["security/selinux/hooks.c", "security/selinux/include/objsec.h"], "versions": [{"version": "6.18", "status": "affected"}, {"version": "0", "lessThan": "6.18", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.30", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.7", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "6.18.30"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.18", "versionEndExcluding": "7.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17.10"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/e3e722ea88e051ae5361dc540c01ba18f87b5ffd"}, {"url": "https://git.kernel.org/stable/c/bce6a32bc888dfebb6a7d4dee454228b71ed8369"}, {"url": "https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217"}], "title": "selinux: fix avdcache auditing", "x_generator": {"engine": "bippy-1.2.0"}}}}