In the Linux kernel, the following vulnerability has been resolved:
fanotify: fix false positive on permission events
fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing the permission check.
Fix by skipping over detached marks that are not in the current group.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-64kUpgrade kernel-rt-64k-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-docUpgrade libperfUpgrade kernelUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modules-extra | Jul 26, 2026 | Jul 22, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.209-147.245 | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade perf6.18Upgrade kernel6.18-toolsUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade bpftool6.18Upgrade perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-livepatch-6.18.30-61.116Upgrade kernel6.18-headers | Jun 23, 2026 | May 28, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | May 28, 2026 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfoUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade libperf-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade rvUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extra-matchedUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-core | Jul 27, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-gke-6.8Upgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-7.0Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-gke-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-5.15Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-virtual-7.0Upgrade linux-image-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-7.0Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-aws-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-gcp-7.0Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-azure-cvmUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-bosUpgrade linux-image-generic-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-7.0Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-26.04Upgrade linux-image-azure-5.15Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-raspi-7.0Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-26.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-5.15 | Jul 20, 2026 | May 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 8, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub