CVE-2026-46150: fanotify: fix false positive on permission events

High severity · published May 28, 2026

CVE-2026-46150

fanotify: fix false positive on permission events

7.1

CVSS

0.1%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the current group.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 3% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

4.12 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; +2 more · source: NVD

Linux · Linux

abc77577a669f424c5d0c185b9994f2621c52aa4 before a24765332e129c1916d5a6615418b75599b8fcdc; abc77577a669f424c5d0c185b9994f2621c52aa4 before 4a7611ad653785fcdea5ff5f4441e2b7d05b7f11; abc77577a669f424c5d0c185b9994f2621c52aa4 before 04bb66be92f48ed13c3faf1139d892df228789bc; abc77577a669f424c5d0c185b9994f2621c52aa4 before 895ebbedf88318607c24acc0f591c74b165e1d0a; abc77577a669f424c5d0c185b9994f2621c52aa4 before f130790f1acc8399f32652846c875a251efd040f; abc77577a669f424c5d0c185b9994f2621c52aa4 before 7baa02b0ae9d17ec5f08836d8ea88ce1927d0678; +3 more · source: vendor

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens

0 · source: CISA

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-46150

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-46150

Patch