What is the CVSS score of CVE-2026-53367?

CVE-2026-53367 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-53367?

Yes, a patch is available for CVE-2026-53367. Update the affected software to the latest version immediately.

Linux Kernel CVE-2026-53367

EUVD-2026-45437 MEDIUM

2026-07-19 Linux

GHSA-fwgc-423f-pq7g

Information Disclosure Linux Red Hat Suse

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

5.5 MEDIUM

Local access and low privileges are required to trigger the audit cache reuse; impact is High on audit-log availability (completeness), with no confidentiality or integrity impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Red Hat

5.5 LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 29, 2026 - 19:27 vuln.today

CVSS changed

Jul 29, 2026 - 17:07 NVD

5.5 (MEDIUM)

Patch available

Jul 19, 2026 - 11:02 EUVD

CVE Published

Jul 19, 2026 - 09:10 nvd

MEDIUM 5.5

CVE Published

Jul 19, 2026 - 09:10 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

selinux: fix avdcache auditing

The per-task avdcache was incorrectly saving and reusing the audited vector computed by avc_audit_required() rather than recomputing based on the currently requested permissions and distinguishing the denied versus allowed cases. As a result, some permission checks were not being audited, e.g. directory write checks after a previously cached directory search check.

[PM: line wrap tweaks]

AnalysisAI

SELinux avdcache auditing in the Linux kernel incorrectly reuses a previously computed audited vector from avc_audit_required() rather than recomputing it against the current access request and its allow/deny outcome, causing certain permission checks to go silently unlogged. Affected are local, low-privileged users on kernels containing the per-task avdcache introduced at commit dde3a5d0f4dce1d1a6095e6b8eeb59b75d28fb3b, through versions prior to 6.18.30, 7.0.7, and 7.1. An attacker exploiting this gap can perform SELinux-policy-violating operations - such as directory writes following a cached directory search - that generate no audit record, directly undermining intrusion detection and compliance monitoring that depends on SELinux audit logs. No public exploit exists and EPSS is at the 6th percentile; however, organizations with strict SELinux audit compliance requirements face elevated effective risk.

Technical ContextAI

The vulnerability resides in the Linux kernel's SELinux Access Vector Cache (AVC) subsystem, specifically the per-task variant (avdcache) introduced to reduce AVC lookup overhead. When a permission check is made, avc_audit_required() computes an 'audited vector' - a bitmask of access bits that need to be logged based on the deny/allow outcome. The bug is that this computed audited vector is incorrectly persisted in the per-task avdcache and reused verbatim for subsequent cache hits, rather than being recomputed against the new request's specific permissions and their outcome. The net effect is that the second (and later) accesses of a different type to the same subject/object pair may have their audit events silently suppressed. No CWE is assigned by NVD, but the root cause most closely aligns with CWE-778 (Insufficient Logging) or CWE-345 (Insufficient Verification of Data Authenticity). The affected CPE is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*, scoped to kernel versions introduced with the per-task avdcache commit.

RemediationAI

The primary fix is to upgrade to Linux kernel 6.18.30, 7.0.7, or mainline 7.1, which correct the avdcache audited-vector reuse logic. For Ubuntu systems, apply the update published under USN-8593-1 at https://ubuntu.com/security/notices/USN-8593-1. The upstream stable-tree fix commits are e3e722ea88e051ae5361dc540c01ba18f87b5ffd, bce6a32bc888dfebb6a7d4dee454228b71ed8369, and f92d542577db878acfd21cc18dab23d03023b217, all accessible via https://git.kernel.org/stable/c/. For environments where an immediate kernel upgrade is not feasible, a compensating control is to disable SELinux's per-task AVC cache if a runtime knob exists for the deployed kernel (note: this carries a measurable performance trade-off on SELinux-intensive workloads and may not be available in all distributions). Organizations relying on SELinux audit logs for compliance evidence should treat this patch as a priority regardless of CVSS score, as incomplete audit trails may cause compliance gaps.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Low

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-53367 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-53367

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code