PT-2026-47373 · Linux · Linux

Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-46302

NVD

In the Linux kernel, the following vulnerability has been resolved:

selinux: allow multiple opens of /sys/fs/selinux/policy

Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kernel policy. The original motivation seems to have been a mix of preventing an inconsistent view of the policy size and preventing userspace from allocating kernel memory without bound, but this is arguably equally bad. Eliminate the policy opened flag and shrink the critical section that the policy mutex is held. While we are making changes here, drop a couple of extraneous BUG ONs.

Related Identifiers

CVE-2026-46302

Affected Products

Linux

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-46302 · Security Note
• https://git.kernel.org/stable/c/a02cd6805562305f936e807da83e253b719dd965 · Note
• https://git.kernel.org/stable/c/714362f3779dfa453a78ced32396a72726962a41 · Note