Threats Tagged 'cve-2026-59677'

CVE-2026-59677 is a missing authorization vulnerability in SELinux's policycoreutils seunshares component. It allows a user running in an unconfined context to kill processes, including those owned by root, that are also running in an unconfined context. This affects policycoreutils versions up to and including 3.10.

A security advisory from Red Hat addresses vulnerabilities in the policycoreutils packages used in Red Hat Hardened Images. The main issue is missing authorization checks in the seunshares component, which allows a local unconfined SELinux user to terminate other unconfined processes, including those owned by root, potentially causing denial of service. The advisory covers multiple updated RPM packages to address these issues. Default SELinux confinement reduces the attack surface. No explicit patch is currently available according to the advisory.

A missing authorization vulnerability in SELinux policycoreutils seunshares allows a user running in an unconfined context to kill root-owned processes also running in an unconfined context. This issue affects policycoreutils through version 3.10. The vulnerability has a medium severity rating and does not have a confirmed CVSS score. No information about patches or vendor advisories is provided.