{"id":"CVE-2026-99129","published":"2026-10-28T11:17:32.690","lastModified":"2026-10-28T11:17:32.690","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: fix BPF token permission checks\n\nAvoid multiple lookups of the bpffs creator SID using the token's file\ndescriptor when the same information can be found via the resolved\npath/dentry (in selinux_bpf_token_create()) or the token itself (in\nselinux_bpf_map_create() and selinux_bpf_prog_load()).  Not only does\nthis simplify the code, it avoids potential TOCTOU issues if the user\nchanges the token file descriptor passed into the kernel.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/77d499e61d36e883a6ad1f10afe05f556aa7e0cc","tags":[]},{"url":"https://git.kernel.org/stable/c/e1ef306ba20eb13099ca4463527890df67619405","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}