CVE-2024-47659

A flaw was found in the Linux kernel's Smack (Simplified Mandatory Access Control Kernel) security module. When handling network connections over Transmission Control Protocol (TCP) or Datagram Congestion Control Protocol (DCCP) using IPv4, Smack incorrectly mirrors the security label of incoming connections on outgoing response packets instead of applying the receiving socket's assigned label. This mislabeling allows an unauthorized process or endpoint to bypass mandatory access control policies and transmit data to a peer without the required write permissions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.