Description
In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their names into own /proc/PID/attr/smack/current This occurs because do_setattr() imports the provided label in advance, before checking "relabel-self" list. This change ensures that the "relabel-self" list is checked before importing the label.
References (8)
Core 8
Core References
Scores
EPSS
0.0005
EPSS Percentile
15.3%
Details
Status
published
Products (25)
linux/Kernel
4.4.0 - 5.10.248linux
linux/Kernel
5.11.0 - 5.15.198linux
linux/Kernel
5.16.0 - 6.1.160linux
linux/Kernel
6.13.0 - 6.17.13linux
linux/Kernel
6.18.0 - 6.18.2linux
linux/Kernel
6.2.0 - 6.6.120linux
linux/Kernel
6.7.0 - 6.12.63linux
Linux/Linux
< 4.4
Linux/Linux
38416e53936ecf896948fdeffc36b76979117952 - 4a7a7621619a366712fb9cefcb6e69f956c247ce
Linux/Linux
38416e53936ecf896948fdeffc36b76979117952 - 60e8d49989410a7ade60f5dadfcd979c117d05c0
... and 15 more
Published
Dec 24, 2025
Tracked Since
Feb 18, 2026