{"schema_version":"1.7.5","id":"CVE-2026-46057","published":"2026-05-27T12:57:16.076Z","modified":"2026-07-15T01:48:54.568889156Z","related":["openSUSE-SU-2026:10954-1"],"summary":"landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nlandlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()\n\nhook_cred_transfer() only copies the Landlock security blob when the\nsource credential has a domain.  This is inconsistent with\nlandlock_restrict_self() which can set LOG_SUBDOMAINS_OFF on a\ncredential without creating a domain (via the ruleset_fd=-1 path): the\nfield is committed but not preserved across fork() because the child's\nprepare_creds() calls hook_cred_transfer() which skips the copy when\ndomain is NULL.\n\nThis breaks the documented use case where a process mutes subdomain logs\nbefore forking sandboxed children: the children lose the muting and\ntheir domains produce unexpected audit records.\n\nFix this by unconditionally copying the Landlock credential blob.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"ead9079f75696a028aea8860787770c80eddb8f9"},{"fixed":"2fcde49092aac55d5beef43fdd3633217672f7d1"},{"fixed":"1c513b8a00df13d231021e74ad92babb3fedf64a"},{"fixed":"874c8f83826c95c62c21d9edfe9ef43e5c346724"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46057.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.15.0"},{"fixed":"6.18.27"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46057.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1c513b8a00df13d231021e74ad92babb3fedf64a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2fcde49092aac55d5beef43fdd3633217672f7d1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/874c8f83826c95c62c21d9edfe9ef43e5c346724"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46057.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46057"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46057.json"}}