CVE-2026-53287

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the audit log capset() function where the effective capability set is incorrectly recorded into the inheritable field. This occurs because the function reports cap pi (process inheritable) using the value of cap effective instead of cap inheritable. This flaw corrupts audit data used for compliance and forensic analysis, potentially allowing an attacker to mask changes to inheritable capabilities made during preparations for privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.