Vulnerabilities / CVE-2026-46300

CVE-2026-46300

Published 2026-05-23 · Undergoing Analysis

CVE-2026-46300

Linux Kernel Missing Initialization of a Variable Vulnerability

Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2026-10-28, with a fix-by date of 2026-10-31. Patch it first.

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

7.8 HIGH
CVSS 3.1 · CNA

16%
chance of exploitation in the next 30 days (EPSS; higher than 96% of CVEs)

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.

Scores

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCNA

Affected packages and fixed versions

Package	Ecosystem	Fixed in
Kernel	Linux	5.10.257, 5.15.208, 6.1.174, 6.6.141, 6.12.91, 6.18.33, 7.0.10

Affected products

linux linux kernel: ≥ 3.9, ≤ 5.10.257; ≥ 5.11, < 5.15.208; ≥ 5.16, < 6.1.174; ≥ 6.2, < 6.6.141; ≥ 6.7, < 6.12.91; ≥ 6.13, < 6.18.33; ≥ 6.19, < 7.0.10; 7.1 rc1; 7.1 rc2; 7.1 rc3; 7.1 rc4

Weakness: CWE-787, CWE-456, CWE-123

40 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, OSV.dev, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website