In the Linux kernel, the following vulnerability has been resolved:
selinux: allow multiple opens of /sys/fs/selinux/policy
Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kernel policy. The original motivation seems to have been a mix of preventing an inconsistent view of the policy size and preventing userspace from allocating kernel memory without bound, but this is arguably equally bad. Eliminate the policy_opened flag and shrink the critical section that the policy mutex is held. While we are making changes here, drop a couple of extraneous BUG_ONs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 8, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-generic-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-aws-64k-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-oem-26.04aUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-raspiUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-gke-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04dUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-azure-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-gkeUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-virtualUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-gcpUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gcp-7.0Upgrade linux-image-awsUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-gke-hwe-26.04 | Jul 20, 2026 | Jun 8, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub