PT-2026-47373 · Linux+3 · Linux Kernel+3

CVE-2026-46302

·

Published

2026-05-05

·

Updated

2026-09-07

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1
Description A flaw in the SELinux component allows only a single open of the '/sys/fs/selinux/policy' endpoint at any time. This restriction enables any process to block other processes from reading the kernel policy. The issue stems from the use of the policy opened flag and an overly broad critical section where the policy mutex is held.
Recommendations Update to the kernel-devel-7.0.12-1.1 package for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.

Exploit

Fix

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-89636
BDU:2026-13880
CVE-2026-46302
OESA-2026-3204
OPENSUSE-SU-2026:11014-1
USN-8566-1
USN-8568-1
USN-8569-1
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu
Opensuse Tumbleweed