CyberRota Analysis
AI-GeneratedThe Linux kernel has a vulnerability in the SELinux module where the per-task avdcache improperly saves and reuses audited vectors, leading to incomplete auditing of permission checks. This could result in unauthorized access not being logged, particularly affecting directory write operations following cached directory searches. System administrators and security teams managing Linux environments should prioritize this issue to ensure comprehensive auditing and compliance with security policies.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check. [PM: line wrap tweaks]
Related CVEs
Other vulnerabilities affecting the same vendor(s)