CVE-2026-46057

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Landlock security module where the LOG SUBDOMAINS OFF setting is not correctly inherited across fork(). The hook cred transfer() function only copies the Landlock security blob if the source credential has a domain. However, landlock restrict self() can set LOG SUBDOMAINS OFF without creating a domain. Consequently, when a process mutes subdomain logs before forking sandboxed children, the children do not inherit this setting, leading to the generation of unexpected audit records.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.