{"id":"CVE-2026-46150","summary":"fanotify: fix false positive on permission events","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nfanotify: fix false positive on permission events\n\nfsnotify_get_mark_safe() may return false for a mark on an unrelated group,\nwhich results in bypassing the permission check.\n\nFix by skipping over detached marks that are not in the current group.","modified":"2026-10-28T02:30:31.485074353Z","published":"2026-05-28T09:36:06.494Z","related":["ALSA-2026:42919","ALSA-2026:43307","ALSA-2026:49213","ALSA-2026:49214","SUSE-SU-2026:22433-1","SUSE-SU-2026:22436-1","SUSE-SU-2026:22458-1","SUSE-SU-2026:22460-1","SUSE-SU-2026:22742-1","SUSE-SU-2026:22769-1","SUSE-SU-2026:22812-1","SUSE-SU-2026:22835-1","SUSE-SU-2026:23672-1","SUSE-SU-2026:23673-1","SUSE-SU-2026:23674-1","SUSE-SU-2026:23676-1","SUSE-SU-2026:23677-1","SUSE-SU-2026:23678-1","SUSE-SU-2026:23679-1","SUSE-SU-2026:23680-1","SUSE-SU-2026:23681-1","SUSE-SU-2026:23682-1","SUSE-SU-2026:23683-1","SUSE-SU-2026:23684-1","SUSE-SU-2026:23685-1","SUSE-SU-2026:23686-1","SUSE-SU-2026:23687-1","SUSE-SU-2026:23747-1","SUSE-SU-2026:23748-1","SUSE-SU-2026:23749-1","SUSE-SU-2026:23750-1","SUSE-SU-2026:23751-1","SUSE-SU-2026:23752-1","SUSE-SU-2026:23753-1","SUSE-SU-2026:23754-1","SUSE-SU-2026:23755-1","SUSE-SU-2026:23756-1","SUSE-SU-2026:23757-1","SUSE-SU-2026:23758-1","SUSE-SU-2026:23759-1","SUSE-SU-2026:23760-1","SUSE-SU-2026:23766-1","SUSE-SU-2026:23767-1","SUSE-SU-2026:23768-1","SUSE-SU-2026:23769-1","SUSE-SU-2026:23770-1","SUSE-SU-2026:23771-1","SUSE-SU-2026:23772-1","SUSE-SU-2026:23773-1","SUSE-SU-2026:23778-1","SUSE-SU-2026:23779-1","SUSE-SU-2026:23780-1","SUSE-SU-2026:23781-1","SUSE-SU-2026:23790-1","SUSE-SU-2026:23791-1","SUSE-SU-2026:23798-1","SUSE-SU-2026:23799-1","SUSE-SU-2026:23801-1","SUSE-SU-2026:23803-1","SUSE-SU-2026:23804-1","SUSE-SU-2026:23805-1","SUSE-SU-2026:23806-1","SUSE-SU-2026:23807-1","SUSE-SU-2026:23808-1","SUSE-SU-2026:23809-1","SUSE-SU-2026:23810-1","SUSE-SU-2026:23815-1","SUSE-SU-2026:23816-1","SUSE-SU-2026:23817-1","SUSE-SU-2026:23818-1","SUSE-SU-2026:23819-1","SUSE-SU-2026:23820-1","SUSE-SU-2026:23821-1","SUSE-SU-2026:23822-1","SUSE-SU-2026:23823-1","SUSE-SU-2026:23824-1","SUSE-SU-2026:23825-1","SUSE-SU-2026:23826-1","SUSE-SU-2026:23827-1","SUSE-SU-2026:23828-1","SUSE-SU-2026:23832-1","SUSE-SU-2026:23833-1","SUSE-SU-2026:23834-1","SUSE-SU-2026:23835-1","SUSE-SU-2026:23936-1","SUSE-SU-2026:23937-1","SUSE-SU-2026:23938-1","SUSE-SU-2026:23939-1","SUSE-SU-2026:23940-1","SUSE-SU-2026:23941-1","SUSE-SU-2026:23942-1","SUSE-SU-2026:23944-1","SUSE-SU-2026:23960-1","SUSE-SU-2026:23961-1","SUSE-SU-2026:23962-1","SUSE-SU-2026:23963-1","SUSE-SU-2026:23964-1","SUSE-SU-2026:23965-1","SUSE-SU-2026:23966-1","SUSE-SU-2026:23967-1","SUSE-SU-2026:2450-1","SUSE-SU-2026:2630-1","SUSE-SU-2026:2631-1","SUSE-SU-2026:2632-1","SUSE-SU-2026:2638-1","SUSE-SU-2026:2658-1","SUSE-SU-2026:2722-1","SUSE-SU-2026:2799-1","SUSE-SU-2026:4231-1","SUSE-SU-2026:4244-1","SUSE-SU-2026:4256-1","SUSE-SU-2026:4258-1","SUSE-SU-2026:4310-1","SUSE-SU-2026:4315-1","SUSE-SU-2026:4356-1","openSUSE-SU-2026:10954-1","openSUSE-SU-2026:21388-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46150.json"},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-784472.html"},{"type":"WEB","url":"https://git.kernel.org/stable/c/04bb66be92f48ed13c3faf1139d892df228789bc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4a7611ad653785fcdea5ff5f4441e2b7d05b7f11"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7746e3bd4cc19b5092e00d32d676e329bfcb6900"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7baa02b0ae9d17ec5f08836d8ea88ce1927d0678"},{"type":"WEB","url":"https://git.kernel.org/stable/c/895ebbedf88318607c24acc0f591c74b165e1d0a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a24765332e129c1916d5a6615418b75599b8fcdc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b7b24b28c8cd55844cab908f4f39dded638d5538"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f130790f1acc8399f32652846c875a251efd040f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46150.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46150"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"abc77577a669f424c5d0c185b9994f2621c52aa4"},{"fixed":"a24765332e129c1916d5a6615418b75599b8fcdc"},{"fixed":"4a7611ad653785fcdea5ff5f4441e2b7d05b7f11"},{"fixed":"04bb66be92f48ed13c3faf1139d892df228789bc"},{"fixed":"895ebbedf88318607c24acc0f591c74b165e1d0a"},{"fixed":"f130790f1acc8399f32652846c875a251efd040f"},{"fixed":"7baa02b0ae9d17ec5f08836d8ea88ce1927d0678"},{"fixed":"b7b24b28c8cd55844cab908f4f39dded638d5538"},{"fixed":"7746e3bd4cc19b5092e00d32d676e329bfcb6900"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46150.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.12.0"},{"fixed":"5.10.258"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.209"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.175"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.140"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.88"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.30"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.7"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46150.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"}]}