CVE-2026-46150

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotify_get_mark_safe() function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventing intended security restrictions.

This Moderate severity flaw in the Linux kernel's fanotify subsystem allows a local attacker to bypass security restrictions. An incorrect return value from fsnotify_get_mark_safe() can lead to unauthorized actions on Red Hat Enterprise Linux systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.