In the Linux kernel, the following vulnerability has been resolved:
selinux: allow multiple opens of /sys/fs/selinux/policy
Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kernel policy. The original motivation seems to have been a mix of preventing an inconsistent view of the policy size and preventing userspace from allocating kernel memory without bound, but this is arguably equally bad. Eliminate the policy_opened flag and shrink the critical section that the policy mutex is held. While we are making changes here, drop a couple of extraneous BUG_ONs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 8, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-azure-7.0Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-raspi-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-aws-7.0Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-realtime-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-7.0Upgrade linux-image-oem-24.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-oem-26.04aUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-gke-64k-7.0 | Jul 20, 2026 | Jun 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub