CVE-2026-99129

A flaw was found in the Linux kernel. A local user could exploit a time-of-check to time-of-use TOCTOU race condition during Security-Enhanced Linux SELinux permission checks for Berkeley Packet Filter BPF tokens. By altering a token file descriptor between kernel lookups, an attacker could bypas...