Description (CNA)
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SELinuxProject / selinux | affected 0 through 3.10 |
CWE
CWE-367
References
- https://bugzilla.suse.com/show_bug.cgi?id=1268256
- https://security.opensuse.org/2026/07/15/selinux-seunshare.html
ADP enrichment
No English description supplied.
No references supplied.