In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open suppo…
High CVSS 8.4
Summary
In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/11406d0d7e11b4e525bb2ace2c70107031d058da
- https://git.kernel.org/stable/c/44c74d27d1b9aaa99fa8a83640c1223575262b80
- https://git.kernel.org/stable/c/646ebbc5f2ff9147d084e1213143f091026a611c
- https://git.kernel.org/stable/c/d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3
- https://git.kernel.org/stable/c/e507633bf76bccf1a6af27771fb0d6e2862b7eac
- https://git.kernel.org/stable/c/fc633a598206d4f23af782db7c0b5f3a82751d2c
Timeline
- nvd_ingest NVD