CVE-2026-59677
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In the seunshares tool from the selinux policycoreutils package, a missing authorization vulnerability allows a user running in an unconfined context to kill root-owned processes also running in an unconfined context. This issue affects policycoreutils through version 3.10.
Risk Assessment
A user in an unconfined context could escalate privileges by killing root processes, potentially causing service disruption or system instability.
Recommendation
Update policycoreutils to a version later than 3.10 where this vulnerability is fixed.
Other vulnerabilities in policycoreutils
See all- CVE-2026-19079Medium
A TOCTOU race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script uses find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker could exploit the race window between file discovery and label change by swapping directory components with symlinks, causing chcon to follow the symlink and modify SELinux labels on arbitrary system files, potentially undermining SELinux protections on critical files like /etc/shadow.
- CVE-2026-59676Medium
In the seunshare tool of selinux policycoreutils, there is a TOCTOU (Time-of-check Time-of-use) race condition vulnerability. A user running seunshare in the unconfined SELinux domain can delete arbitrary root-owned files. This affects policycoreutils up to version 3.10.
Original NVD description (English source)
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.