Vulnerabilities

TI-2026-42554 CVE-2026-59677 · GHSA-gm4w-wf6f-2ghm

Process Kill Attack Vector in killall() in seunshare

LOW 29

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.0014 Published 2026-07-23 Partial fix CWE-862

TI-2026-42553 CVE-2026-59676 · GHSA-j6qh-f45v-j454

Local File Deletion Attack Vector in rm_rf() in seunshare

LOW 25

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned fi…

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00101 Published 2026-07-23 Partial fix CWE-367

TI-2014-02576 CVE-2014-3215 · GHSA-h57c-m953-4q5h

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes…

LOW 30

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which make…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00357 Published 2014-05-08 Partial fix CWE-264

Vulnerabilities

Filters

Process Kill Attack Vector in killall() in seunshare

Local File Deletion Attack Vector in rm_rf() in seunshare

seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes…