Strix
26.1K

CVE-2026-53367

UnknownEPSS 0.15%

Last modified

CVE-2026-53367 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]. EPSS estimates a 0.15% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]

Metrics

EPSS Probability
0.15%

5.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, < e3e722ea88e051ae5361dc540c01ba18f87b5ffd; >= dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, < bce6a32bc888dfebb6a7d4dee454228b71ed8369; >= dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, < f92d542577db878acfd21cc18dab23d03023b217; 21879b76831fab52f6a615c531f86412c8d3c827; >= 6.17.10, < 6.18
LinuxLinux6.18

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-53367?
In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]
How severe is CVE-2026-53367?
Severity scoring for CVE-2026-53367 is pending analysis. The EPSS model estimates a 0.15% probability of exploitation in the next 30 days.
How do I fix CVE-2026-53367?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-53367?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST