{"id":"CVE-2026-53367","summary":"selinux: fix avdcache auditing","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: fix avdcache auditing\n\nThe per-task avdcache was incorrectly saving and reusing the\naudited vector computed by avc_audit_required() rather than\nrecomputing based on the currently requested permissions and\ndistinguishing the denied versus allowed cases. As a result,\nsome permission checks were not being audited, e.g.\ndirectory write checks after a previously cached directory\nsearch check.\n\n[PM: line wrap tweaks]","modified":"2026-10-28T02:30:58.704437984Z","published":"2026-07-19T09:10:28.879Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53367.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/bce6a32bc888dfebb6a7d4dee454228b71ed8369"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e3e722ea88e051ae5361dc540c01ba18f87b5ffd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f92d542577db878acfd21cc18dab23d03023b217"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53367.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53367"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b"},{"fixed":"e3e722ea88e051ae5361dc540c01ba18f87b5ffd"},{"fixed":"bce6a32bc888dfebb6a7d4dee454228b71ed8369"},{"fixed":"f92d542577db878acfd21cc18dab23d03023b217"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.17.10"},{"fixed":"6.18"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"21879b76831fab52f6a615c531f86412c8d3c827"}]}],"versions":["v6.17.13","v6.17.12","v6.17.11","v6.17.10"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53367.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.30"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.7"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53367.json"}}],"schema_version":"1.9.2"}