This vulnerability is a TOCTOU race condition in the seunshare component of SELinux policycoreutils. When seunshare is executed by a user in the unconfined SELinux domain, the race condition can be exploited to delete arbitrary files owned by root. The issue affects all versions of policycoreutils up to and including 3.10. No official remediation level or patch information is provided in the available data.

An attacker with the ability to run seunshare in the unconfined SELinux domain can exploit this race condition to delete arbitrary files owned by root. This could lead to denial of service or potential disruption of system integrity. The vulnerability requires local access with limited privileges and high attack complexity, with no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to seunshare to trusted users only and monitor for unusual file deletion activity related to root-owned files. Avoid running seunshare in the unconfined SELinux domain if possible.