CVE-2026-46054

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> selinux: fix overlayfs mmap() and mprotect() access checks<br /> <br /> The existing SELinux security model for overlayfs is to allow access if<br /> the current task is able to access the top level file (the "user" file)<br /> and the mounter&amp;#39;s credentials are sufficient to access the lower<br /> level file (the "backing" file). Unfortunately, the current code does<br /> not properly enforce these access controls for both mmap() and mprotect()<br /> operations on overlayfs filesystems.<br /> <br /> This patch makes use of the newly created security_mmap_backing_file()<br /> LSM hook to provide the missing backing file enforcement for mmap()<br /> operations, and leverages the backing file API and new LSM blob to<br /> provide the necessary information to properly enforce the mprotect()<br /> access controls.