CVE-2026-46057

Katalog CVE

CVSS 3.3 · Low EPSS 0,16%

Kerentanan pada linux kernel. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() hook_cred_transfer() only copies the Landlock security blob when the source credential has a domain. This is inconsistent with landlock_restrict_self() which can set LOG_SUBDOMAINS_OFF on a credential without creating a domain (via the ruleset_fd=-1 path): the field is committed but not preserved across fork() because the child's prepare_creds() calls hook_cred_transfer() which skips the copy when domain is NULL. This breaks the documented use case where a process mutes subdomain logs before forking sandboxed children: the children lose the muting and their domains produce unexpected audit records. Fix this by unconditionally copying the Landlock credential blob.

Rincian

Terbit di NVD

27 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1c513b8a00df13d231021e74ad92babb3fedf64a patch
• https://git.kernel.org/stable/c/2fcde49092aac55d5beef43fdd3633217672f7d1 patch
• https://git.kernel.org/stable/c/874c8f83826c95c62c21d9edfe9ef43e5c346724 patch