Skip to main content

policycoreutils seunshare CVE-2026-59677

| EUVDEUVD-2026-47939 MEDIUM
Missing Authorization (CWE-862)
2026-07-23 suse GHSA-gm4w-wf6f-2ghm
Authentication Bypass Red Hat Selinux Suse
6.8
CVSS 4.0 · Vendor: suse
Share

Severity by source

Vendor (suse) PRIMARY
6.8 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.5 MEDIUM

Local attack requiring low-privilege unconfined session; no confidentiality or integrity impact; kills root-owned processes yielding high availability impact with unchanged scope.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (suse).

CVSS VectorVendor: suse

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 23, 2026 - 08:16 vuln.today
CVE Published
Jul 23, 2026 - 06:43 cve.org
MEDIUM 6.8

DescriptionCVE.org

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.

AnalysisAI

Missing authorization in the seunshare utility (policycoreutils through 3.10) permits a low-privileged local user running in an unconfined SELinux domain to send kill signals to root-owned processes also running in unconfined context - effectively enabling unprivileged denial-of-service against privileged system processes. The root cause (CWE-862) is the absence of ownership validation before allowing signal delivery, bypassing the expectation that non-root users cannot terminate root-owned processes. No public exploit has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.

Technical ContextAI

seunshare is a setuid-root helper program within the policycoreutils package, the SELinux userspace toolchain. It provides namespace isolation for SELinux applications but contains a Missing Authorization flaw (CWE-862) in its process management logic - it fails to verify that the calling user has ownership or delegated permission to deliver signals to a target process before doing so. The vulnerability operates entirely within unconfined SELinux domains, which are domains where Mandatory Access Control (MAC) policy enforcement is intentionally relaxed. In these contexts, the assumption is that Discretionary Access Control (DAC) - i.e., Unix process ownership rules - provides the safety boundary, but seunshare's deficient checks undermine that boundary. The affected CPE is cpe:2.3:a:selinuxproject:selinux:*:*:*:*:*:*:*:*, covering all versions of the SELinux userspace package through 3.10. The issue was reported by the SUSE security team.

RemediationAI

Consult the SUSE Security Advisory at https://security.opensuse.org/2026/07/15/selinux-seunshare.html and the associated Bugzilla report at https://bugzilla.suse.com/show_bug.cgi?id=1268256 for distribution-specific update packages; no exact fixed upstream version is independently confirmed from available data, so upgrade to the latest available policycoreutils release once confirmed patched by your distribution vendor. As an immediate compensating control, audit and restrict which user accounts are assigned unconfined SELinux domains by reviewing SELinux user mappings via 'semanage login -l' and reassigning regular users to confined domains such as 'user_u' or 'staff_u' - this prevents untrusted users from reaching the attack surface entirely but may break workflows that depend on unconfined access. Additionally, consider restricting execution of the seunshare binary to trusted users via file ACLs or by removing its setuid bit if namespace isolation features are not required, though this may impact intended seunshare functionality.

More in Selinux

View all
CVE-2015-1815 CRITICAL POC
10.0 Mar 30

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to ex
CVE-2016-7545 HIGH
8.8 Jan 19

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI io
CVE-2021-36086 LOW POC
3.3 Jul 01

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set

CVE-2021-36087 LOW POC
3.3 Jul 01

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check
CVE-2021-36085 LOW POC
3.3 Jul 01

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperm
CVE-2021-36084 LOW POC
3.3 Jul 01

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissio
CVE-2020-10751 MEDIUM
6.1 May 26

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed t
CVE-2015-3170 MEDIUM
5.5 Jul 21

selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH logi
CVE-2018-1063 MEDIUM
4.4 Mar 02

Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected
SUSE Linux Enterprise Micro 5.5 Affected

Share

CVE-2026-59677 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy