High 7.3Published Jun 9, 2026

CVE-2026-46328apparmor: fix rlimit for posix cpu timers

Updated under an hour ago (Oct 27, 2026, 5:23 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond setting the rlimit. Refactor the code so its clear when what code is setting the limit and conditionally update the posix cpu timers when appropriate.

CVSS: 7.3 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before e1cc11550b2f66687a374536c9dfdddcefca0efe; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before 2232d7cd243833ad750cae656d1817fe43744a09; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before 28aa93fcfb33b6d580c5df4ae8b6d13fb0e6fcd3; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before 1f736dfe27c857b78f8461cd7c3dd9640be74b37; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before e43818b16815c0c2bf933ef28316f8e704e5e0ef; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before 9bf1fa150775b0c6b794e4b6a2c0395e13777999; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before 57d51d41b90eface809b72e0e009b50546492f1f; from baa73d9e478ff32d62f3f9422822b59dd9a95a21 before 6ca56813f4a589f536adceb42882855d91fb1125	CNA record
linux linux_kernel linux:linux_kernel	from 4.10 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4	NVD

References

References

https://git.kernel.org/stable/c/e1cc11550b2f66687a374536c9dfdddcefca0efe	patch
https://git.kernel.org/stable/c/2232d7cd243833ad750cae656d1817fe43744a09	patch
https://git.kernel.org/stable/c/28aa93fcfb33b6d580c5df4ae8b6d13fb0e6fcd3	patch
https://git.kernel.org/stable/c/1f736dfe27c857b78f8461cd7c3dd9640be74b37	patch
https://git.kernel.org/stable/c/e43818b16815c0c2bf933ef28316f8e704e5e0ef	patch
https://git.kernel.org/stable/c/9bf1fa150775b0c6b794e4b6a2c0395e13777999	patch
https://git.kernel.org/stable/c/57d51d41b90eface809b72e0e009b50546492f1f	patch
https://git.kernel.org/stable/c/6ca56813f4a589f536adceb42882855d91fb1125	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.