CVE-2026-46155

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46155", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.102Z", "datePublished": "2026-05-28T09:36:11.092Z", "dateUpdated": "2026-10-19T19:36:53.105Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:30:06.776Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix out-of-bounds read in smb2_compound_op()\n\nIf a server sends a truncated response but a large OutputBufferLength, and\nterminates the EA list early, check_wsl_eas() returns success without\nvalidating that the entire OutputBufferLength fits within iov_len.\n\nThen smb2_compound_op() does:\n memcpy(idata->wsl.eas, data[0], size[0]);\n\nWhere size[0] is OutputBufferLength. If iov_len is smaller than size[0],\nmemcpy can read beyond the end of the rsp_iov allocation and leak adjacent\nkernel heap memory."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:N - The bug is in the in-kernel SMB client processing a response from a remote SMB server over TCP/445; the out-of-bounds read is driven entirely by attacker-controlled data received from a remote peer.\nAC:L - A malicious server reliably and deterministically crafts the triggering response (truncated payload with a large OutputBufferLength and early-terminated EA list); there is no race or uncontrolled memory-layout condition required to cause the OOB read.\nPR:N - The attacker is the remote SMB server (or a network MITM) and needs no privileges or account on the victim client system to send the malicious response.\nUI:N - On an already-mounted share served by a compromised/malicious server or via MITM, the vulnerable WSL-EA query fires during routine stat/readdir on reparse-point files with no deliberate victim action, consistent with the sibling CVE-2026-46185.\nS:U - The leak is confined to the kernel's own security authority and exposed to local processes; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The memcpy reads adjacent kernel heap memory (up to tens of bytes) into wsl.eas, and crafted EA value fields cause that leaked kernel data to be reflected to userspace as the file's uid/gid/mode/device via stat().\nI:N - The flaw is a pure out-of-bounds read; the destination buffer is size-bounded (outlen \u2264 MAX) so no kernel memory is written or corrupted, providing no integrity/write primitive.\nA:H - The out-of-bounds read can cross into an unmapped page (and traps under KASAN), producing a kernel oops/panic and denial of service."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/smb2inode.c"], "versions": [{"version": "7449d736bbbd160c76b01b8fcdf72f58a8757d4b", "lessThan": "dffb44b2e06a2908e249f0f93156fc987eee1d1c", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "9b3af35645ff9cd334edc130249f9a2fb2bea25f", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "512d33bc8ea4ea5c19728ee118715f4b1f4d1926", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "8d09328dfda089675e4c049f3f256064a1d1996b", "status": "affected", "versionType": "git"}, {"version": "6.6.32", "lessThan": "6.6.140", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/smb2inode.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.140", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.88", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.30", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.7", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.32", "versionEndExcluding": "6.6.140"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.88"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.30"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/dffb44b2e06a2908e249f0f93156fc987eee1d1c"}, {"url": "https://git.kernel.org/stable/c/9b3af35645ff9cd334edc130249f9a2fb2bea25f"}, {"url": "https://git.kernel.org/stable/c/512d33bc8ea4ea5c19728ee118715f4b1f4d1926"}, {"url": "https://git.kernel.org/stable/c/a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c"}, {"url": "https://git.kernel.org/stable/c/8d09328dfda089675e4c049f3f256064a1d1996b"}], "title": "smb/client: fix out-of-bounds read in smb2_compound_op()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46155", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T15:20:35.167464Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T19:36:53.105Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46155", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.102Z", "datePublished": "2026-05-28T09:36:11.092Z", "dateUpdated": "2026-10-16T15:31:05.727Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:30:06.776Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix out-of-bounds read in smb2_compound_op()\n\nIf a server sends a truncated response but a large OutputBufferLength, and\nterminates the EA list early, check_wsl_eas() returns success without\nvalidating that the entire OutputBufferLength fits within iov_len.\n\nThen smb2_compound_op() does:\n memcpy(idata->wsl.eas, data[0], size[0]);\n\nWhere size[0] is OutputBufferLength. If iov_len is smaller than size[0],\nmemcpy can read beyond the end of the rsp_iov allocation and leak adjacent\nkernel heap memory."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL"}, "scenarios": [{"lang": "en", "value": "AV:N - The bug is in the in-kernel SMB client processing a response from a remote SMB server over TCP/445; the out-of-bounds read is driven entirely by attacker-controlled data received from a remote peer.\nAC:L - A malicious server reliably and deterministically crafts the triggering response (truncated payload with a large OutputBufferLength and early-terminated EA list); there is no race or uncontrolled memory-layout condition required to cause the OOB read.\nPR:N - The attacker is the remote SMB server (or a network MITM) and needs no privileges or account on the victim client system to send the malicious response.\nUI:N - On an already-mounted share served by a compromised/malicious server or via MITM, the vulnerable WSL-EA query fires during routine stat/readdir on reparse-point files with no deliberate victim action, consistent with the sibling CVE-2026-46185.\nS:U - The leak is confined to the kernel's own security authority and exposed to local processes; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The memcpy reads adjacent kernel heap memory (up to tens of bytes) into wsl.eas, and crafted EA value fields cause that leaked kernel data to be reflected to userspace as the file's uid/gid/mode/device via stat().\nI:N - The flaw is a pure out-of-bounds read; the destination buffer is size-bounded (outlen \u2264 MAX) so no kernel memory is written or corrupted, providing no integrity/write primitive.\nA:H - The out-of-bounds read can cross into an unmapped page (and traps under KASAN), producing a kernel oops/panic and denial of service."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/smb2inode.c"], "versions": [{"version": "7449d736bbbd160c76b01b8fcdf72f58a8757d4b", "lessThan": "dffb44b2e06a2908e249f0f93156fc987eee1d1c", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "9b3af35645ff9cd334edc130249f9a2fb2bea25f", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "512d33bc8ea4ea5c19728ee118715f4b1f4d1926", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c", "status": "affected", "versionType": "git"}, {"version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "lessThan": "8d09328dfda089675e4c049f3f256064a1d1996b", "status": "affected", "versionType": "git"}, {"version": "6.6.32", "lessThan": "6.6.140", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/smb2inode.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.140", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.88", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.30", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.7", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.32", "versionEndExcluding": "6.6.140"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.88"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.30"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/dffb44b2e06a2908e249f0f93156fc987eee1d1c"}, {"url": "https://git.kernel.org/stable/c/9b3af35645ff9cd334edc130249f9a2fb2bea25f"}, {"url": "https://git.kernel.org/stable/c/512d33bc8ea4ea5c19728ee118715f4b1f4d1926"}, {"url": "https://git.kernel.org/stable/c/a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c"}, {"url": "https://git.kernel.org/stable/c/8d09328dfda089675e4c049f3f256064a1d1996b"}], "title": "smb/client: fix out-of-bounds read in smb2_compound_op()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46155", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T15:20:35.167464Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:20:35.741Z"}, "title": "CISA ADP Vulnrichment"}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/smb/client/smb2inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "dffb44b2e06a2908e249f0f93156fc987eee1d1c", "status": "affected", "version": "7449d736bbbd160c76b01b8fcdf72f58a8757d4b", "versionType": "git"}, {"lessThan": "9b3af35645ff9cd334edc130249f9a2fb2bea25f", "status": "affected", "version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "versionType": "git"}, {"lessThan": "512d33bc8ea4ea5c19728ee118715f4b1f4d1926", "status": "affected", "version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "versionType": "git"}, {"lessThan": "a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c", "status": "affected", "version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "versionType": "git"}, {"lessThan": "8d09328dfda089675e4c049f3f256064a1d1996b", "status": "affected", "version": "ea41367b2a602f602ea6594fc4a310520dcc64f4", "versionType": "git"}, {"lessThan": "6.6.140", "status": "affected", "version": "6.6.32", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/smb/client/smb2inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"lessThan": "6.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.140", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.88", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.30", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D523D325-8158-45CB-87FC-9BE22E067E4D", "versionEndExcluding": "6.6.140", "versionStartIncluding": "6.6.32", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4CCB4364-CBF5-40DD-AB08-D4665BBE06FB", "versionEndExcluding": "6.12.88", "versionStartIncluding": "6.9", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF39AE08-AE6D-4410-8FBE-76F6BF5BF55B", "versionEndExcluding": "6.18.30", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0893CA7-9AE6-4DFE-AC75-48967D73AD8E", "versionEndExcluding": "7.0.7", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix out-of-bounds read in smb2_compound_op()\n\nIf a server sends a truncated response but a large OutputBufferLength, and\nterminates the EA list early, check_wsl_eas() returns success without\nvalidating that the entire OutputBufferLength fits within iov_len.\n\nThen smb2_compound_op() does:\n memcpy(idata->wsl.eas, data[0], size[0]);\n\nWhere size[0] is OutputBufferLength. If iov_len is smaller than size[0],\nmemcpy can read beyond the end of the rsp_iov allocation and leak adjacent\nkernel heap memory."}], "id": "CVE-2026-46155", "lastModified": "2026-10-19T20:18:35.750", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46155", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:20:35.167464Z", "version": "2.0.3"}}]}, "published": "2026-05-28T10:16:31.133", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/512d33bc8ea4ea5c19728ee118715f4b1f4d1926"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8d09328dfda089675e4c049f3f256064a1d1996b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9b3af35645ff9cd334edc130249f9a2fb2bea25f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/dffb44b2e06a2908e249f0f93156fc987eee1d1c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: smb/client: fix out-of-bounds read in smb2_compound_op()", "id": "2482660", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482660"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-130", "details": ["A flaw was found in the Linux kernel's Server Message Block (SMB) client. A remote attacker, acting as a malicious SMB server, could send a specially crafted, truncated response with an oversized buffer length. This could lead to an out-of-bounds read in the smb2_compound_op() function, allowing the attacker to leak sensitive kernel heap memory."], "name": "CVE-2026-46155", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46155\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46155\nhttps://lore.kernel.org/linux-cve-announce/2026052823-CVE-2026-46155-a53c@gregkh/T"], "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7449d736bbbd160c76b01b8fcdf72f58a8757d4b,dffb44b2e06a2908e249f0f93156fc987eee1d1c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ea41367b2a602f602ea6594fc4a310520dcc64f4,9b3af35645ff9cd334edc130249f9a2fb2bea25f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ea41367b2a602f602ea6594fc4a310520dcc64f4,512d33bc8ea4ea5c19728ee118715f4b1f4d1926)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ea41367b2a602f602ea6594fc4a310520dcc64f4,a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ea41367b2a602f602ea6594fc4a310520dcc64f4,8d09328dfda089675e4c049f3f256064a1d1996b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.32,6.6.140)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.9)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.140,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.88,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.30,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.7,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-28T12:30:16.889752+00:00", "updated": "2026-06-09T23:00:15.735017+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}