PT-2026-47373

CVE-2026-46302

·

Published

2026-05-05

·

Updated

2026-10-18

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1
Description A flaw in the SELinux component allows only a single open of the '/sys/fs/selinux/policy' endpoint at any time. This restriction enables any process to block other processes from reading the kernel policy. The issue stems from the use of the policy opened flag and an overly broad critical section where the policy mutex is held.
Recommendations Update to the kernel-devel-7.0.12-1.1 package for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
AZL-89636
OESA-2026-3204
OPENSUSE-SU-2026:11014-1
USN-8566-1
USN-8568-1
USN-8569-1
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1
USN-8728-2
USN-8728-3
Found an issue in the description? Have something to add? Feel free to write us 👾