selinux: fix overlayfs mmap() and mprotect() access checks
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "user" file) and the mounter's credentials are sufficient to access the lower level file (the "backing" file). Unfortunately, the current code does not properly enforce these access controls for both mmap() and mprotect() operations on overlayfs filesystems. This patch makes use of the newly created security_mmap_backing_file() LSM hook to provide the missing backing file enforcement for mmap() operations, and leverages the backing file API and new LSM blob to provide the necessary information to properly enforce the mprotect() access controls.
CVE-2026-46054
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-46054
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2f502839e85ab265f03f25f30d6463154aee5473",
"lessThan": "bc6c380c1159de52a252ed11f19a42c47f60a735",
"versionType": "git"
},
{
"status": "affected",
"version": "2f502839e85ab265f03f25f30d6463154aee5473",
"lessThan": "8bacd09f12c27710228562e4d13163e58c5f4a45",
"versionType": "git"
},
{
"status": "affected",
"version": "2f502839e85ab265f03f25f30d6463154aee5473",
"lessThan": "d844702198395d3f80222777030f69db6be6b709",
"versionType": "git"
},
{
"status": "affected",
"version": "2f502839e85ab265f03f25f30d6463154aee5473",
"lessThan": "cd0e707a927a70cdfd8bc5a512a9719a87f5ed51",
"versionType": "git"
},
{
"status": "affected",
"version": "2f502839e85ab265f03f25f30d6463154aee5473",
"lessThan": "82544d36b1729153c8aeb179e84750f0c085d3b1",
"versionType": "git"
}
],
"programFiles": [
"security/selinux/hooks.c",
"security/selinux/include/objsec.h"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.144",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.95",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.38",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.0.4",
"versionType": "semver",
"lessThanOrEqual": "7.0.*"
},
{
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"security/selinux/hooks.c",
"security/selinux/include/objsec.h"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-46054
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #40110 · Revision 1
- Added to Heist Feed
- Publisher date