CVE-2026-46104

A flaw was found in the Linux kernel's SELinux (Security-Enhanced Linux) socket permission helpers. In configurations where multiple Linux Security Modules (LSMs) are active, the system may incorrectly access socket security data. This can lead to invalid security identifiers (SIDs) and class values being used in Access Vector Cache (AVC) checks, potentially allowing a bypass of intended security policies.

This vulnerability is classified as having a Moderate impact for Red Hat because exploitation requires local access and depends on non-standard configurations stacking multiple security modules. Standard Red Hat Enterprise Linux environments deploy SELinux as the primary module and do not utilize the composite socket blob architecture introduced in newer upstream releases. Consequently, default installations are not exposed to the unintended access control decisions or socket verification failures associated with this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.