Vulnerability · Published Jun 16, 2026 · Assigned by Linux
CVE-2026-46331net/sched: fix pedit partial COW leading to page cache corruption
High 7.8
In plain English
A high-severity out-of-bounds write in Linux from Linux. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.6%top 49.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account for the runtime header offset added by typed keys. This can leave part of the write region un-COW'd. Fix by moving skb_ensure_writable() inside the per-key loop where the actual write offset is known, and add overflow checking on the offset arithmetic. For negative offsets (e.g. Ethernet header edits at ingress), use skb_cow() to COW the headroom instead. Guard offset_valid() against INT_MIN, where negation is undefined.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:10 | kernel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug-devel-matched | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-debug-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-devel-matched | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-64k-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-abi-stablelists | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-core | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-cross-headers | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-debug | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-debug | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-devel-matched | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-debug-uki-virt | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-devel | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-devel-matched | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-doc | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-doc | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-doc | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-headers | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-headers | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-headers | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-modules | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-modules-extra-matched | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:10 | kernel-rt | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-debug | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-debug | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-debug-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-debug-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-debug-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-debug-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-debug-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-debug-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-debug-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-64k-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-64k-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-debug | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-debug-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-debug-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-debug-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-debug-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-debug-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-rt-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-553.136.1.rt7.477.el8_10 | ALSA-2026:27354 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-tools | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-tools | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-tools | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-tools-libs | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-tools-libs-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-uki-virt | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-uki-virt-addons | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-uki-virt-addons | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump-devel | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump-devel-matched | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump-modules | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump-modules-core | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | kernel-zfcpdump-modules-extra | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | libperf | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | libperf | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | perf | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | perf | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | perf | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | python3-perf | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:8 | python3-perf | 4.18.0-553.136.1.el8_10 | ALSA-2026:27353 |
| AlmaLinux:9 | python3-perf | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | rtla | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | rtla | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| AlmaLinux:10 | rv | 6.12.0-211.26.1.el10_2 | ALSA-2026:27288 |
| AlmaLinux:9 | rv | 5.14.0-687.17.1.el9_8 | ALSA-2026:27789 |
| Debian:12 | linux | 6.1.176-1 | DEBIAN-CVE-2026-46331 |
| Debian:13 | linux | 6.12.94-1 | DEBIAN-CVE-2026-46331 |
| Debian:14 | linux | 7.0.13-1 | DEBIAN-CVE-2026-46331 |
| Rocky Linux:10 | kernel | 0:6.12.0-211.26.1.el10_2 | RLSA-2026:27288 |
| Rocky Linux:8 | kernel | 0:4.18.0-553.136.1.el8_10 | RLSA-2026:27353 |
| Rocky Linux:9 | kernel | 0:5.14.0-687.17.1.el9_8 | RLSA-2026:27789 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-553.136.1.rt7.477.el8_10 | RLSA-2026:27354 |
| Ubuntu:22.04:LTS | linux | 5.15.0-187.197 | USN-8631-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-187.197 | UBUNTU-CVE-2026-46331 |
| Ubuntu:24.04:LTS | linux | 6.8.0-137.137 | UBUNTU-CVE-2026-46331 |
| Ubuntu:24.04:LTS | linux | 6.8.0-137.137 | USN-8630-1 |
| Ubuntu:25.10 | linux | no fix listed | UBUNTU-CVE-2026-46331 |
| Ubuntu:26.04:LTS | linux | 7.0.0-29.29 | USN-8629-1 |
| Ubuntu:26.04:LTS | linux | 7.0.0-29.29 | UBUNTU-CVE-2026-46331 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2026-46331 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1113.120 | USN-8631-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | abe35bf3be51482593076d516a680d79e5fbc8e1 – before 544d857b42a1734b923040e13aa61a6fd4746cf2b773640d5bb9e2acfd91e2695717af04d47aa116 – before d5d01d35a5a7d36f7cb679b67d9cbdd5205672dc8b796475fd7882663a870456466a4fb315cc1bd6 – before a071e057518decc5e3bec89855758f5f8786f2c58b796475fd7882663a870456466a4fb315cc1bd6 – before b685d6ef6f07a3b5ce814565a25f39f2157538a58b796475fd7882663a870456466a4fb315cc1bd6 – before 2bec122b9fb91507a758ab5e3e5c4fbe7cb3f61b8b796475fd7882663a870456466a4fb315cc1bd6 – before b198ed4e52580a7238c7c7082f03906f8b3103138b796475fd7882663a870456466a4fb315cc1bd6 – before 3dee9d0c198faeb95d052c1b94c2958751a285128b796475fd7882663a870456466a4fb315cc1bd6 – before 899ee91156e57784090c5565e4f31bd7dbffbc5a |
| Linux | Linux | 5.18 |
Weakness: CWE-787, CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://git.kernel.org/stable/c/544d857b42a1734b923040e13aa61a6fd4746cf2
- https://git.kernel.org/stable/c/d5d01d35a5a7d36f7cb679b67d9cbdd5205672dc
- https://git.kernel.org/stable/c/a071e057518decc5e3bec89855758f5f8786f2c5
- https://git.kernel.org/stable/c/b685d6ef6f07a3b5ce814565a25f39f2157538a5
- https://git.kernel.org/stable/c/2bec122b9fb91507a758ab5e3e5c4fbe7cb3f61b
- https://git.kernel.org/stable/c/b198ed4e52580a7238c7c7082f03906f8b310313
- https://git.kernel.org/stable/c/3dee9d0c198faeb95d052c1b94c2958751a28512
- https://git.kernel.org/stable/c/899ee91156e57784090c5565e4f31bd7dbffbc5a
- https://github.com/sgkdev/packet_edit_meme/tree/main exploit
- https://access.redhat.com/security/cve/CVE-2026-46331 vdb-entry, x_refsource_REDHAT
- RHBZ#2479492 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46331.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:27709 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33666 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34048 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40021 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28887 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28962 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29080 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34098 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29856 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29863 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29799 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29833 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29794 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27731 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27288 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27705 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27713 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27708 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27789 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33225 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27353 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33220 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27707 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27704 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27355 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33219 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33221 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33222 vendor-advisory, x_refsource_REDHAT