CVE-2026-46150

Published: May 28, 2026Modified: Jun 9, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the current group.

Affected (8)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.12 to 5.10.258
Linux Linux Kernel	From 5.11 to 5.15.209
Linux Linux Kernel	From 5.16 to 6.1.175
Linux Linux Kernel	From 6.13 to 6.18.30
Linux Linux Kernel	From 6.19 to 7.0.7
Linux Linux Kernel	From 6.2 to 6.6.140
Linux Linux Kernel	From 6.7 to 6.12.88
Linux Linux Kernel	Version 7.1 rc1