Every CVE Search/ Get API key

CVE-2026-59677

Process Kill Attack Vector in killall() in seunshare

6.8 MediumFix available

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.14%Unchanged since Jul 23, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.8

Process Kill Attack Vector in killall() in seunshare

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.

Record
CVE-2026-59677
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-862
Updated
2026-11-02
EUVDEUVD-2026-47939 6.8

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.

Record
EUVD-2026-47939
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-gm4w-wf6f-2ghm 6.8

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is...

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.

Record
GHSA-gm4w-wf6f-2ghm
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-862
Updated
2026-11-02
NVD 6.8

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.

Record
CVE-2026-59677
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-862
Updated
2026-11-02
OSVDEBIAN-CVE-2026-59677 6.8

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

Record
DEBIAN-CVE-2026-59677
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3345 6.8

policycoreutils security update

It contains the selinux policy core utilities

Security Fix(es):

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.(CVE-2026-59677)

Record
OESA-2026-3345
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
Show 6 moreShow less
OSVOESA-2026-3346 6.8

policycoreutils security update

It contains the selinux policy core utilities

Security Fix(es):

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.(CVE-2026-59677)

Record
OESA-2026-3346
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3347 6.8

policycoreutils security update

It contains the selinux policy core utilities

Security Fix(es):

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.(CVE-2026-59677)

Record
OESA-2026-3347
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3348 6.8

policycoreutils security update

It contains the selinux policy core utilities

Security Fix(es):

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.(CVE-2026-59677)

Record
OESA-2026-3348
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3417 6.8

policycoreutils security update

It contains the selinux policy core utilities

Security Fix(es):

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context

This issue affects policycoreutils through 3.10.(CVE-2026-59677)

Record
OESA-2026-3417
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVRHSA-2026:44343 5.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:44343
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-59677 6.8

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

Record
UBUNTU-CVE-2026-59677
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
policycoreutils
Debian:12
 before 2.7-1
2.7-1
policycoreutils
Debian:13
 before 2.7-1
2.7-1
policycoreutils
Debian:14
 before 2.7-1
2.7-1
selinux-python
Debian:12
 All versions, plus listed versions
3.10-13.11-13.11-23.4-13.5-1
Show 9 moreShow less
3.7-13.7-23.7-33.7-43.8-13.8.1-13.8.1-23.9-13.9-2
 None known
selinux-python
Debian:13
 before 3.7-1
3.7-1
selinux-python
Debian:14
 before 3.7-1
3.7-1
policycoreutils
openEuler:20.03-LTS-SP4
 before 3.1-10.oe2003sp4
3.1-10.oe2003sp4
policycoreutils
openEuler:22.03-LTS-SP4
 before 3.3-13.oe2203sp4
3.3-13.oe2203sp4
policycoreutils
openEuler:24.03-LTS-SP1
 before 3.5-5.oe2403sp1
3.5-5.oe2403sp1
policycoreutils
openEuler:24.03-LTS-SP3
 before 3.5-5.oe2403sp3
3.5-5.oe2403sp3
Show 20 moreShow less
Affected packages
PackageAffectedFixed
policycoreutils
openEuler:24.03-LTS-SP4
 before 3.5-5.oe2403sp4
3.5-5.oe2403sp4
policycoreutils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-dbus
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-gui
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-newrole
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-python-utils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-restorecond
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-sandbox
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
python3-policycoreutils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils
Ubuntu:14.04:LTS
 All versions, plus listed versions
2.1.13-22.2.1-12.2.4-12.2.5-1
 None known
policycoreutils
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.3-1
 None known
selinux
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:0.11
 None known
policycoreutils
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.7-1
 None known
selinux
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:0.11
 None known
policycoreutils
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.9-23.0-1
 None known
policycoreutils
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.1-33.3-13.3-1build1
 None known
policycoreutils
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.5-2
 None known
policycoreutils
Ubuntu:26.10
 All versions, plus listed versions
3.9-23.11-1
 None known
policycoreutils
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.8.1-13.9-2
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-59677 is a medium vulnerability (CVSS 6.8) in Selinuxproject Selinux, published July 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in policycoreutils 2.7-1.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open