CVE-2026-59676

Vulnerability Description

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,

This issue affects policycoreutils through 3.10.

Vulnerability Details

Published Date

July 23, 2026

Last Modified

July 23, 2026

CWE ID

CWE-367

Source

NVD

Vendor

SELinuxProject

Product

selinux

External References

https://bugzilla.suse.com/show_bug.cgi?id=1268256
https://security.opensuse.org/2026/07/15/selinux-seunshare.html

CVE-2026-59676

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment