Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b before e3e722ea88e051ae5361dc540c01ba18f87b5ffd; affected dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b before bce6a32bc888dfebb6a7d4dee454228b71ed8369; affected dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b before f92d542577db878acfd21cc18dab23d03023b217; affected 21879b76831fab52f6a615c531f86412c8d3c827; affected 6.17.10 before 6.18 |
| Linux / Linux | affected 6.18; unaffected 0 before 6.18; unaffected 6.18.30 through 6.18.*; unaffected 7.0.7 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.