CVE-2026-93191

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The smack msg queue msgrcv() function incorrectly validates permissions by checking the current task instead of the target task. During the msgsnd() syscall path, the pipelined send() optimization may be used to push a message directly to a waiting receiver task. In this scenario, the sender task performs the check on behalf of the receiver task (passed as the target parameter). Because smack msg queue msgrcv() ignores the target and evaluates the current task, a receiver that does not meet the read/write requirements may still receive the message if the sender does, resulting in a violation of the Mandatory Access Control (MAC) policy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.