Riskcovery

CVE-2026-46302

selinux: allow multiple opens of /sys/fs/selinux/policy

State
Published
Severity
Not scored
Published
Jun 8, 2026
Updated
Oct 30, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: allow multiple opens of /sys/fs/selinux/policy

Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kernel policy. The original motivation seems to have been a mix of preventing an inconsistent view of the policy size and preventing userspace from allocating kernel memory without bound, but this is arguably equally bad. Eliminate the policy_opened flag and shrink the critical section that the policy mutex is held. While we are making changes here, drop a couple of extraneous BUG_ONs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 9795810d116bc9071485929ba6471dc8d5bd158bAffected
  • cee74f47a6baba0ac457e87687fdcf0abd599f0a to before d8cafd0226d5df682d1f4ea978a4318fe3a11210Affected
  • cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 0ed712134a3db0075bfe9a0f8536c48728ec745eAffected
  • cee74f47a6baba0ac457e87687fdcf0abd599f0a to before c24d2e190b955baf3a95e05d34b192f61bd201b3Affected
  • cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 714362f3779dfa453a78ced32396a72726962a41Affected
  • cee74f47a6baba0ac457e87687fdcf0abd599f0a to before a02cd6805562305f936e807da83e253b719dd965Affected
LinuxLinux
  • 2.6.37Affected
  • before 2.6.37Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.58 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.