SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-59677

MEDIUM · CVSS 6.8 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

A missing authorization vulnerability in the policycoreutils component of SELinux allows unconfined users to terminate processes owned by the root user that are also running in an unconfined context. This could lead to unauthorized process termination, potentially compromising system stability and security. Administrators of Linux systems utilizing SELinux should prioritize addressing this vulnerability to protect against potential exploitation.

CVE
CVE-2026-59677
Severity
MEDIUM
CVSS
6.8
EPSS
0.11%
Linux

Original NVD Description

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.