CVE-2026-53367

The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check.

[PM: line wrap tweaks]

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53367.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b

Fixed

e3e722ea88e051ae5361dc540c01ba18f87b5ffd

Fixed

bce6a32bc888dfebb6a7d4dee454228b71ed8369

Fixed

f92d542577db878acfd21cc18dab23d03023b217

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6.17.10

Fixed

6.18

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

21879b76831fab52f6a615c531f86412c8d3c827

Affected versions

v6.*

v6.17.10

v6.17.11

v6.17.12

v6.17.13

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53367.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.18.0

Fixed

6.18.30

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.0.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53367.json"