CVE-2026-46057
Description
A flaw was found in the Linux kernel's Landlock security module regarding the inheritance of LOG_SUBDOMAINS_OFF across process forks. When a process mutes subdomain logs using landlock_restrict_self() without creating a domain, this setting is not properly transferred to forked child processes. Consequently, these child processes may generate unexpected audit records, potentially leading to information disclosure.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
