CVE-2026-46328

apparmor: fix rlimit for posix cpu timers

State: Published
Severity: 7.3 High
Published: Jun 9, 2026
Updated: Aug 5, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix rlimit for posix cpu timers

Posix cpu timers requires an additional step beyond setting the rlimit. Refactor the code so its clear when what code is setting the limit and conditionally update the posix cpu timers when appropriate.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before e1cc11550b2f66687a374536c9dfdddcefca0efeAffected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 2232d7cd243833ad750cae656d1817fe43744a09Affected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 28aa93fcfb33b6d580c5df4ae8b6d13fb0e6fcd3Affected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 1f736dfe27c857b78f8461cd7c3dd9640be74b37Affected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before e43818b16815c0c2bf933ef28316f8e704e5e0efAffected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 9bf1fa150775b0c6b794e4b6a2c0395e13777999Affected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 57d51d41b90eface809b72e0e009b50546492f1fAffected baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 6ca56813f4a589f536adceb42882855d91fb1125Affected
LinuxLinux	4.10Affected before 4.10Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.14 through 6.18.Not affected 6.19.4 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before e1cc11550b2f66687a374536c9dfdddcefca0efeAffected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 2232d7cd243833ad750cae656d1817fe43744a09Affected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 28aa93fcfb33b6d580c5df4ae8b6d13fb0e6fcd3Affected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 1f736dfe27c857b78f8461cd7c3dd9640be74b37Affected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before e43818b16815c0c2bf933ef28316f8e704e5e0efAffected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 9bf1fa150775b0c6b794e4b6a2c0395e13777999Affected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 57d51d41b90eface809b72e0e009b50546492f1fAffected
baa73d9e478ff32d62f3f9422822b59dd9a95a21 to before 6ca56813f4a589f536adceb42882855d91fb1125Affected

LinuxLinux

4.10Affected
before 4.10Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.14 through 6.18.*Not affected
6.19.4 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.