Threats tagged 'ghsa-x4j5-868q-98xc'

A vulnerability in the Linux kernel's SELinux implementation related to BPF token permission checks has been fixed. The issue involved multiple lookups of the bpffs creator SID using the token's file descriptor, which could lead to potential time-of-check to time-of-use (TOCTOU) race conditions if the token file descriptor was changed by the user. The fix simplifies the code by using the resolved path/dentry or the token itself to obtain the necessary information, thereby avoiding these TOCTOU issues.