Linux Kernel AppArmor RLimit CPU Timer Issue
CVE-2026-46328 Published on June 9, 2026
apparmor: fix rlimit for posix cpu timers
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix rlimit for posix cpu timers
Posix cpu timers requires an additional step beyond setting the rlimit.
Refactor the code so its clear when what code is setting the
limit and conditionally update the posix cpu timers when appropriate.
Products Associated with CVE-2026-46328
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below e1cc11550b2f66687a374536c9dfdddcefca0efe is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below 2232d7cd243833ad750cae656d1817fe43744a09 is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below 28aa93fcfb33b6d580c5df4ae8b6d13fb0e6fcd3 is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below 1f736dfe27c857b78f8461cd7c3dd9640be74b37 is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below e43818b16815c0c2bf933ef28316f8e704e5e0ef is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below 9bf1fa150775b0c6b794e4b6a2c0395e13777999 is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below 57d51d41b90eface809b72e0e009b50546492f1f is affected.
- Version baa73d9e478ff32d62f3f9422822b59dd9a95a21 and below 6ca56813f4a589f536adceb42882855d91fb1125 is affected.
- Version 4.10 is affected.
- Before 4.10 is unaffected.
- Version 5.10.252, <= 5.10.* is unaffected.
- Version 5.15.202, <= 5.15.* is unaffected.
- Version 6.1.165, <= 6.1.* is unaffected.
- Version 6.6.128, <= 6.6.* is unaffected.
- Version 6.12.75, <= 6.12.* is unaffected.
- Version 6.18.14, <= 6.18.* is unaffected.
- Version 6.19.4, <= 6.19.* is unaffected.
- Version 7.0, <= * is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.