CVE-2026-98413

🗓️ 14 Oct 2026 13:27:45Reported by LinuxType

Uninitialized stack variable in Linux kernel selinux avc_has_perm_noaudit() allows info leak.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-98413	14 Oct 202618:40	–	circl
Cvelist	CVE-2026-98413 selinux: always fill AVC decision in avc_has_perm_noaudit()	14 Oct 202613:27	–	cvelist
Debian CVE	CVE-2026-98413	14 Oct 202613:27	–	debiancve
EUVD	EUVD-2026-101062	14 Oct 202613:27	–	euvd
NVD	CVE-2026-98413	14 Oct 202614:17	–	nvd
OSV	DEBIAN-CVE-2026-98413	14 Oct 202614:17	–	osv
Positive Technologies	PT-2026-114392	14 Oct 202600:00	–	ptsecurity
UbuntuCve	CVE-2026-98413	14 Oct 202600:00	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-98413	14 Oct 202600:00	–	nessus

Vulners

CNA

Node

linux linux_kernelRange5.1–5.10.271

linux linux_kernelRange5.11.0–5.15.222

linux linux_kernelRange5.16.0–6.1.189

linux linux_kernelRange6.2.0–6.6.158

linux linux_kernelRange6.7.0–6.12.112

linux linux_kernelRange6.13.0–6.18.54

linux linux_kernelRange6.19.0–7.2.8

linux linux_kernelRange7.3.0–7.3-rc4

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/selinux/avc.c"
    ],
    "versions": [
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "c781e737aa0de95289b1774d5fd29388895737a9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "e308c5acfe283a66627fc407065626df4ab753ec",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "f9da796fa238f8e4414ee8481e6c979759a3d563",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "e77461af13eab5c9a953cc52ec8432cc941d61e2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "5a6f9a872b4ff68877caf998bee352153b7154bc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "24e00850bcff46b984f4c44b92e5499450fcfb5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "835133337c2ce200db56f62d018c79087dee2603",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e6f2f381e4015386a656a369835f949c26000e6b",
        "lessThan": "8861db305103107199b1426f25fde1fb6d465583",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/selinux/avc.c"
    ],
    "versions": [
      {
        "version": "5.1",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.1",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.271",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.222",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.189",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.158",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.112",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.54",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.8",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc4",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/5a6f9a872b4ff68877caf998bee352153b7154bc
git	www.git.kernel.org/stable/c/e77461af13eab5c9a953cc52ec8432cc941d61e2
git	www.git.kernel.org/stable/c/f9da796fa238f8e4414ee8481e6c979759a3d563
git	www.git.kernel.org/stable/c/835133337c2ce200db56f62d018c79087dee2603
git	www.git.kernel.org/stable/c/8861db305103107199b1426f25fde1fb6d465583
git	www.git.kernel.org/stable/c/c781e737aa0de95289b1774d5fd29388895737a9
git	www.git.kernel.org/stable/c/24e00850bcff46b984f4c44b92e5499450fcfb5a
git	www.git.kernel.org/stable/c/e308c5acfe283a66627fc407065626df4ab753ec

14 Oct 2026 14:17Current

6.1Medium risk

Vulners AI Score6.1

Linux kernel selinux avc_has_perm_noaudit()information disclosure uninitialized stack variable