The Linux kernel SELinux module had a vulnerability (CVE-2026-53367) where the per-task avdcache reused an audited vector computed by avc_audit_required() instead of recomputing it for each permission check. This flaw led to missing audit records for some permission checks, including directory write checks after cached directory search checks. The fix involved correcting the avdcache auditing to ensure accurate auditing of permission checks by recomputing the audit vector as needed.

The vulnerability caused incomplete auditing of SELinux permission checks, potentially allowing some unauthorized or denied actions to go unlogged. This could reduce the effectiveness of security monitoring and forensic analysis but does not directly indicate privilege escalation or denial of service.

A fix has been implemented in the Linux kernel to correct the avdcache auditing behavior. Users should apply the official kernel updates that include this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisories for current remediation guidance.