PT-2026-47373 · Linux+3 · Linux Kernel+3
CVE-2026-46302
·
Published
2026-05-05
·
Updated
2026-09-07
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1
Description
A flaw in the SELinux component allows only a single open of the '/sys/fs/selinux/policy' endpoint at any time. This restriction enables any process to block other processes from reading the kernel policy. The issue stems from the use of the
policy opened flag and an overly broad critical section where the policy mutex is held.Recommendations
Update to the kernel-devel-7.0.12-1.1 package for openSUSE Tumbleweed.
At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.
Exploit
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu
Opensuse Tumbleweed