Wind River Support Network

HomeDefectsLIN1023-38482

Fixed

LIN1023-38482 : Security Advisory - linux - CVE-2026-99129

Created: Oct 29, 2026 Updated: Nov 4, 2026

Resolved Date: Nov 3, 2026

Found In Version: 10.23.30.2

Fix Version: 10.23.30.9

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  selinux: fix BPF token permission checks  Avoid multiple lookups of the bpffs creator SID using the token's file descriptor when the same information can be found via the resolved path/dentry (in selinux_bpf_token_create()) or the token itself (in selinux_bpf_map_create() and selinux_bpf_prog_load()).  Not only does this simplify the code, it avoids potential TOCTOU issues if the user changes the token file descriptor passed into the kernel.
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)

CVEs

CVE-2026-99129