CVE-2026-59677 — Process Kill Attack Vector in killall() in seunshare

CVE-2026-59677

Process Kill Attack Vector in killall() in seunshare PUBLISHED

Description (CNA)

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

Affected (CNA)

Vendor / product	Versions
SELinuxProject / selinux	affected 0 through 3.10

CWE

CWE-862

References

https://bugzilla.suse.com/show_bug.cgi?id=1268256
https://security.opensuse.org/2026/07/15/selinux-seunshare.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.