CVE-2026-98214

A flaw was found in the Linux kernel. A local user can bypass Security-Enhanced Linux (SELinux) access controls to execute restricted files on stacked filesystems. When modifying memory protections using the mprotect() system call, the kernel fails to recheck security permissions on intermediate layers of layered filesystems. This flaw allows an attacker to map a restricted file without execution permissions and subsequently mark it executable, bypassing established security policies to execute unauthorized code.

This flaw is rated with Moderate severity because exploitation requires existing local system access and depends on non-default environments utilizing nested stacked filesystem configurations alongside specialized SELinux policy rules. Standard Red Hat Enterprise Linux deployments do not typically utilize multi-tiered overlay mounts with granular execution denials assigned to intermediate backing layers. Consequently, the risk of an authenticated local attacker successfully circumventing security policy constraints to run unauthorized code is confined to these specialized configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.