CVE-2026-23241
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-03-17
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing from the audit read class. Calling getxattrat() or listxattrat() on a file to read its extended attributes will bypass audit rules such as: -w /tmp/test -p rwa -k test_rwa The current patch adds missing syscalls to the audit read class.
Affected Software (5)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 6140be90ec70c39fa844741ca3cc807dd0866394 < a2e8c144299c31d3972295ed80d4cb908daf4f6f |
| Linux | Linux | 6140be90ec70c39fa844741ca3cc807dd0866394 < ad37505ce869a8100ff23f24eea117de7a7516bf |
| Linux | Linux | 6140be90ec70c39fa844741ca3cc807dd0866394 < bcb90a2834c7393c26df9609b889a3097b7700cd |
| Linux | Linux | 6.13 |
| linux | linux_kernel | 6.13 – 6.18.16 |