CVE-2026-46057 - Vulnerability Details

- landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()

Description

In the Linux kernel, the following vulnerability has been resolved:

landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()

hook_cred_transfer() only copies the Landlock security blob when the
source credential has a domain. This is inconsistent with
landlock_restrict_self() which can set LOG_SUBDOMAINS_OFF on a
credential without creating a domain (via the ruleset_fd=-1 path): the
field is committed but not preserved across fork() because the child's
prepare_creds() calls hook_cred_transfer() which skips the copy when
domain is NULL.

This breaks the documented use case where a process mutes subdomain logs
before forking sandboxed children: the children lose the muting and
their domains produce unexpected audit records.

Fix this by unconditionally copying the Landlock credential blob.

Published: 2026-05-27

Score: 3.3 Low

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The Landlock security module in the Linux kernel fails to propagate the LOG_SUBDOMAINS_OFF flag when a process forks, causing child subprocesses to emit audit subdomain logs that the parent process intended to mute. This unintended audit output leads to disclosure of sensitive operations, representing an information‑disclosure weakness.

Affected Systems

All Linux kernels containing the Landlock module before the included patch are affected. No specific version range is enumerated, so any kernel lacking the fix is at risk.

Risk and Exploitability

The flaw is local; an attacker who can fork a process may trigger undesired audit entries that reveal confidential data. EPSS is unavailable, the vulnerability is not listed in CISA KEV, and no CVSS score is reported. Given its local scope and potential privacy impact, the risk is moderate.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`ead9079f75696a028aea8860787770c80eddb8f9`	affected	< 2fcde49092aac55d5beef43fdd3633217672f7d1
`ead9079f75696a028aea8860787770c80eddb8f9`	affected	< 1c513b8a00df13d231021e74ad92babb3fedf64a
`ead9079f75696a028aea8860787770c80eddb8f9`	affected	< 874c8f83826c95c62c21d9edfe9ef43e5c346724

Linux

affected

Version	Status	Constraints
`6.15`	affected	—
`0`	unaffected	< 6.15
`6.18.27`	unaffected	≤ 6.18.*
`7.0.4`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[ead9079f75696a028aea8860787770c80eddb8f9,2fcde49092aac55d5beef43fdd3633217672f7d1)`	affected	code_commit	—
`[2fcde49092aac55d5beef43fdd3633217672f7d1,1c513b8a00df13d231021e74ad92babb3fedf64a)`	affected	code_commit	—
`[1c513b8a00df13d231021e74ad92babb3fedf64a,874c8f83826c95c62c21d9edfe9ef43e5c346724)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.15`	affected	semver	—
`[0,6.15)`	unaffected	semver	—
`[6.18.27,6.19.0)`	unaffected	semver	—
`[7.0.4,7.1.0)`	unaffected	semver	—
`[7.1-rc1,*)`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply a Linux kernel update that includes the Landlock LOG_SUBDOMAINS_OFF inheritance fix.
If an immediate kernel update is not possible, modify audit rules to filter or redact subdomain logs generated by Landlock processes.
Continuously monitor audit logs for unexpected subdomain entries to detect any leakage until the kernel patch is deployed.

Generated by OpenCVE AI on May 28, 2026 at 04:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00166.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1c513b8a00df13d231021e74ad92babb3fedf64a
https://git.kernel.org/stable/c/2fcde49092aac55d5beef43fdd3633217672f7d1
https://git.kernel.org/stable/c/874c8f83826c95c62c21d9edfe9ef43e5c346724
https://lore.kernel.org/linux-cve-announce/2026052755-CVE-2026-46057-9504@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-46057
https://www.cve.org/CVERecord?id=CVE-2026-46057

History

Tue, 16 Jun 2026 15:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		NVD-CWE-noinfo
Metrics		cvssV3_1 `{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}`

Thu, 28 May 2026 03:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-200

Thu, 28 May 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-281
References		https://lore.kernel.org/linux-cve-announce/2026052755-CVE-2026-46057-9504@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-46057 https://www.cve.org/CVERecord?id=CVE-2026-46057

Wed, 27 May 2026 22:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-200

Wed, 27 May 2026 14:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() hook_cred_transfer() only copies the Landlock security blob when the source credential has a domain. This is inconsistent with landlock_restrict_self() which can set LOG_SUBDOMAINS_OFF on a credential without creating a domain (via the ruleset_fd=-1 path): the field is committed but not preserved across fork() because the child's prepare_creds() calls hook_cred_transfer() which skips the copy when domain is NULL. This breaks the documented use case where a process mutes subdomain logs before forking sandboxed children: the children lose the muting and their domains produce unexpected audit records. Fix this by unconditionally copying the Landlock credential blob.
Title		landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1c513b8a00df13d231021e74ad92babb3fedf64a https://git.kernel.org/stable/c/2fcde49092aac55d5beef43fdd3633217672f7d1 https://git.kernel.org/stable/c/874c8f83826c95c62c21d9edfe9ef43e5c346724

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-27T12:57:16.076Z

Updated: 2026-06-14T17:51:11.492Z

Reserved: 2026-05-13T15:03:33.094Z

Link: CVE-2026-46057

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2026-05-27T14:17:25.433

Modified: 2026-06-16T14:54:00.107

Link: CVE-2026-46057

Redhat

Severity :

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-46057 - Bugzilla

OpenCVE Enrichment

Updated: 2026-05-28T04:30:06Z

Weaknesses

CWE-281
Improper Preservation of Permissions
NVD-CWE-noinfo

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object