CyberRota Analysis
AI-GeneratedA TOCTOU race condition vulnerability in the fixfiles script of policycoreutils affects Linux systems, allowing local attackers to exploit a timing window between file discovery and label modification. By manipulating symlinks, an attacker can alter SELinux labels on critical files, potentially undermining mandatory access controls and compromising system security. System administrators and security teams managing Linux environments should prioritize addressing this vulnerability to protect against unauthorized access to sensitive files.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker could exploit a race window between the file discovery and the label change operation by swapping directory components with symlinks, causing chcon to follow the symlink and modify SELinux labels on arbitrary system files. This could undermine SELinux mandatory access control protections on critical files such as /etc/shadow.