CVE-2026-46104: selinux: use sk blob accessor in socket permission helpers
In the Linux kernel, the following vulnerability has been resolved:
selinux: use sk blob accessor in socket permission helpers
SELinux socket state lives in the composite LSM socket blob.
sockhasperm() and nlmsgsockhasextendedperms() currently dereference sk->sksecurity directly, which assumes the SELinux socket blob is at offset zero.
In stacked configurations that assumption does not hold. If another LSM allocates socket blob storage before SELinux, these helpers may read the wrong blob and feed invalid SID and class values into AVC checks.
Use selinuxsock() instead of accessing sk->sksecurity directly.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46104?
CVE-2026-46104 has a medium severity rating of 5.5 based on the CVSS 3.1 scoring system.
How do I fix CVE-2026-46104?
To fix CVE-2026-46104, you should apply the latest patches available from the Linux kernel updates.
What type of systems are affected by CVE-2026-46104?
CVE-2026-46104 affects systems running affected versions of the Linux kernel that utilize SELinux.
What is the impact of CVE-2026-46104?
The impact of CVE-2026-46104 can lead to potential denial of service due to an improper handling of socket permissions.
Is there a workaround for CVE-2026-46104?
Currently, there are no recommended workarounds for CVE-2026-46104 other than updating the Linux kernel.