CVE-2026-93191
kernel: smack: fix incorrect task context in smack_msg_queue_msgrcv
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 14, 2026
Description
A flaw was found in the Linux kernel's SMACK (Simplified Mandatory Access Control Kernel) module. The smack_msg_queue_msgrcv() function incorrectly checks the permissions of the sending task instead of the receiving task when using a message queue. This allows an unauthorized local user, operating under a different SMACK label, to receive messages intended for another task. This bypasses the system's Mandatory Access Control policy, leading to unauthorized information disclosure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-358 · Improperly Implemented Security Check for Standard