Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-14T00:00:00 kernel: selinux: always fill AVC decision in avc_has_perm_noaudit() 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-908

A flaw was found in the Linux kernel's SELinux (Security-Enhanced Linux) subsystem. When an access check is performed with an empty permission set, the Access Vector Cache (AVC) fails to initialize the access decision structure before returning. A local attacker can exploit this flaw by triggering operations that cause the kernel to read uninitialized stack memory during audit logging and decision caching, potentially leading to a denial of service or unpredictable security enforcement.

Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 6 Out of support scope kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Fix deferred kernel Red Hat Enterprise Linux 8 Fix deferred kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt Red Hat OpenShift Container Platform 4 Fix deferred openshift/ose-rhel-coreos-8 Red Hat OpenShift Container Platform 4 Fix deferred openshift/ose-rhel-coreos-9 https://www.cve.org/CVERecord?id=CVE-2026-98413 https://nvd.nist.gov/vuln/detail/CVE-2026-98413 https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98413.mbox