CVE-2026-53367

MediumCVSS 5.5/10Last modified Jul 29, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: fix avdcache auditing

The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check.

[PM: line wrap tweaks]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, < e3e722ea88e051ae5361dc540c01ba18f87b5ffd; >= dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, < bce6a32bc888dfebb6a7d4dee454228b71ed8369; >= dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, < f92d542577db878acfd21cc18dab23d03023b217; 21879b76831fab52f6a615c531f86412c8d3c827; >= 6.17.10, < 6.18
LinuxLinux6.18

References

Timeline

Published
Jul 19, 2026
Last modified
Jul 29, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-533687.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage CVE-2026-533698.4In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skCVE-2026-53376.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure DCVE-2026-533705.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks CurrCVE-2026-533715.5In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s node_desc[64] in strCVE-2026-533725.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty trackingCVE-2026-533737.8In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()CVE-2026-533748.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushCVE-2026-533758.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only CVE-2026-533765.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes drm/amdkfd: Add uppCVE-2026-533775.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more CVE-2026-533785.5In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle T
CVE-2026-53367: Medium severity, CVSS 5.5 | Vulnix