AZL-89636
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89636.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89636
- Upstream
- Published
- 2026-06-08T17:16:48Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-46302 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
selinux: allow multiple opens of /sys/fs/selinux/policy
Currently there can only be a single open of /sys/fs/selinux/policy at any time. This allows any process to block any other process from reading the kernel policy. The original motivation seems to have been a mix of preventing an inconsistent view of the policy size and preventing userspace from allocating kernel memory without bound, but this is arguably equally bad. Eliminate the policyopened flag and shrink the critical section that the policy mutex is held. While we are making changes here, drop a couple of extraneous BUGONs.
- References