جزئیات آسیب‌پذیری
CVE-2026-46054
selinux: fix overlayfs mmap() and mprotect() access checks
شرح رسمی (انگلیسی)
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "user" file) and the mounter's credentials are sufficient to access the lower level file (the "backing" file). Unfortunately, the current code does not properly enforce these access controls for both mmap() and mprotect() operations on overlayfs filesystems. This patch makes use of the newly created security_mmap_backing_file() LSM hook to provide the missing backing file enforcement for mmap() operations, and leverages the backing file API and new LSM blob to provide the necessary information to properly enforce the mprotect() access controls.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| 7.0بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Linux | Linux | 4.19 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2f502839e85ab265f03f25f30d6463154aee5473 ≤ v < 8bacd09f12c27710228562e4d13163e58c5f4a45 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2f502839e85ab265f03f25f30d6463154aee5473 ≤ v < d844702198395d3f80222777030f69db6be6b709 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2f502839e85ab265f03f25f30d6463154aee5473 ≤ v < cd0e707a927a70cdfd8bc5a512a9719a87f5ed51 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2f502839e85ab265f03f25f30d6463154aee5473 ≤ v < 82544d36b1729153c8aeb179e84750f0c085d3b1 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2f502839e85ab265f03f25f30d6463154aee5473 ≤ v < bc6c380c1159de52a252ed11f19a42c47f60a735 | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 7 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۰- https://git.kernel.org/stable/c/bc6c380c1159de52a252ed11f19a42c47f60a735
- https://git.kernel.org/stable/c/8bacd09f12c27710228562e4d13163e58c5f4a45
- https://git.kernel.org/stable/c/d844702198395d3f80222777030f69db6be6b709
- https://git.kernel.org/stable/c/cd0e707a927a70cdfd8bc5a512a9719a87f5ed51
- https://git.kernel.org/stable/c/82544d36b1729153c8aeb179e84750f0c085d3b1
- https://access.redhat.com/security/cve/CVE-2026-46054 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2482025 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46054.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:52764 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25191 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67723 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51746 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52667 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30848 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27811 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59091 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59473 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52649 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27812 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67721 vendor-advisoryx_refsource_REDHAT
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۰۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Linux
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-280Improper Handling of Insufficient Permissions or Privileges
- CWE-862Missing Authorization