SB20261007146 - Incorrect authorization in Linux kernel selinux include

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261007146

SB20261007146 - Incorrect authorization in Linux kernel selinux include

Published: October 7, 2026

Security Bulletin ID SB20261007146
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Incorrect authorization (CVE-ID: CVE-2026-98215)

CWE-ID: CWE-863 - Incorrect Authorization

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service through incorrect access denials.

The vulnerability exists due to incorrect propagation of the user security identifier in the SELinux backing-file security allocation logic when mapping files with nested backing files. A local user can invoke mprotect(PROT_READ) on such a file mapping to cause a denial of service through incorrect access denials.

The access denial was demonstrated with SELinux enforcing and two nested overlayfs mounts. Nested backing files can also occur with FUSE passthrough backed by overlayfs.


Remediation

Install update from vendor's website.

References