CVE-2026-46328

apparmor: fix rlimit for posix cpu timers

HIGH
7.3
CVSS Score
Published: June 9, 2026 at 12:25 PM UTC
Updated: August 5, 2026 at 01:24 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.3
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond setting the rlimit. Refactor the code so its clear when what code is setting the limit and conditionally update the posix cpu timers when appropriate.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 5.10.2524.10 ≤ v < 5.15.2024.10 ≤ v < 6.1.1654.10 ≤ v < 6.12.754.10 ≤ v < 6.18.144.10 ≤ v < 6.19.44.10 ≤ v < 6.6.1284.10 ≤ v < 7.05.11 ≤ v < 5.15.2025.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.146.19 ≤ v < 6.19.46.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.754.10baa73d9e478ff32d62f3f9422822b59dd9a95a21
Vendor states this is fixed in 1f736dfe27c857b78f8461cd7c3dd9640be74b37 (fixed)
Vendor states this is fixed in 2232d7cd243833ad750cae656d1817fe43744a09 (fixed)
Vendor states this is fixed in 28aa93fcfb33b6d580c5df4ae8b6d13fb0e6fcd3 (fixed)
Vendor states this is fixed in 57d51d41b90eface809b72e0e009b50546492f1f (fixed)
Vendor states this is fixed in 6ca56813f4a589f536adceb42882855d91fb1125 (fixed)
Vendor states this is fixed in 9bf1fa150775b0c6b794e4b6a2c0395e13777999 (fixed)
Vendor states this is fixed in e1cc11550b2f66687a374536c9dfdddcefca0efe (fixed)
Vendor states this is fixed in e43818b16815c0c2bf933ef28316f8e704e5e0ef (fixed)
Vendor states this is fixed in 4.10 (unaffected)
Vendor states this is fixed in 5.10.252 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

7.3HIGHLinux
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card