CVE-2026-59677
Received Received - Intake

Missing Authorization in policycoreutils seunshares

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: SUSE

Description
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-23
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-59677

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-59677 is a Missing Authorization vulnerability in the SELinux policycoreutils seunshare program. It allows a user running in an unconfined SELinux context to terminate privileged processes, such as root-owned processes, that are also running in an unconfined context.

Detection Guidance

Check the version of policycoreutils installed on your system. If it is version 3.10 or earlier, the system is vulnerable. Run: rpm -q policycoreutils or dpkg -l policycoreutils depending on your distribution.

Impact Analysis

This vulnerability could allow an unprivileged user to kill critical system processes like the SSH daemon, disrupting system operations and potentially causing a denial of service.

Compliance Impact

This vulnerability allows an unconfined user to terminate privileged processes, which could disrupt critical services like SSH daemons. While it does not directly expose data, service disruption may impact availability requirements in GDPR and HIPAA. However, the primary impact is on system integrity and availability rather than data confidentiality or privacy.

Mitigation Strategies

Upgrade policycoreutils to version 3.11 or later. If an upgrade is not immediately available, consider disabling the seunshare binary by removing its setuid bit or restricting access to it.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59677. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart