Описание
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| policycoreutils | fixed | 2.7-1 | package | |
| selinux-python | fixed | 3.7-1 | package | |
| selinux-python | postponed | bookworm | package | |
| selinux-python | postponed | bullseye | package |
Примечания
src:policycoreutils 2.7 dropped sandbox/seunshare.c core and stopped building
policycoreutils-sandbox. Built from selinux-python until 3.7-1 and moved to a
separate upstream package.
https://security.opensuse.org/2026/07/15/selinux-seunshare.html
EPSS
Связанные уязвимости
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.
A flaw was found in policycoreutils through 3.10 in seunshares. Missing authorization lets a local user in an unconfined SELinux context terminate other processes that are also unconfined, including root-owned ones. That can cause denial of service by killing critical processes.
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.
EPSS