Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-46150

fanotify: fix false positive on permission events

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the current group.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < a24765332e129c1916d5a6615418b75599b8fcdcaffected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < 4a7611ad653785fcdea5ff5f4441e2b7d05b7f11affected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < 04bb66be92f48ed13c3faf1139d892df228789bcaffected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < 895ebbedf88318607c24acc0f591c74b165e1d0aaffected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < f130790f1acc8399f32652846c875a251efd040faffected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < 7baa02b0ae9d17ec5f08836d8ea88ce1927d0678affected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < b7b24b28c8cd55844cab908f4f39dded638d5538affected
  • abc77577a669f424c5d0c185b9994f2621c52aa4 to < 7746e3bd4cc19b5092e00d32d676e329bfcb6900affected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References