Vulnerability in selinux: allow FIOCLEX and FIONCLEX with policy capability
Summary
GSD-2022-1001162: selinux: allow FIOCLEX and FIONCLEX with policy capability. Affects Kernel versions < b531d4ead7990638c4d0402de1f6b3c6f4aa81be. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The selinux package is a security module in the Linux Kernel that provides access control security policies. It enforces mandatory access control policies that confine user programs and system servers to the minimum amount of privilege necessary to complete their tasks. This vulnerability allows the FIOCLEX and FIONCLEX operations to be executed with policy capability, potentially leading to unauthorized access or privilege escalation.
Vulnerability Detail
The vulnerability arises from a lack of proper access control checks in the selinux package. Attackers with policy capability can exploit this vulnerability to execute FIOCLEX and FIONCLEX operations, bypassing intended restrictions. This could result in unauthorized access to sensitive resources or privilege escalation, compromising the security of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version to address the issue.
Conclusion
The vulnerability in selinux that allows FIOCLEX and FIONCLEX operations with policy capability can lead to unauthorized access or privilege escalation. It is crucial to update the Linux Kernel to version v5.17.2 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Selinux is a security module in the Linux Kernel that enforces mandatory access control policies to confine user programs and system servers.
This vulnerability allows unauthorized access or privilege escalation if exploited by an attacker with policy capability.
Update the Linux Kernel to version v5.17.2 or later, which includes the fix for this vulnerability.
No, there is no known workaround for this vulnerability. Updating the Kernel is the recommended solution.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1001xxx/GSD-2022-1001162.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
