CVE-2026-45840: linux kernel from 3.17 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

Affected technology

linux kernel · from 3.17 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

Linux · 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before 8d59b80e69dddb665eb2de36e62859ab2073470e, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before d9e47e29aacb9f8a9d59feb6ab5b128a9bbb40b0, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before b39f763d720d623218bc1d95ace6855d7b474e81, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before f9ef3db77a383d66847fd082c2b437d8ae4d9c63, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before f99ac36b5d7c719d08a69fcdecce40f78a874e15, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before fa6e90bc443bed8dc0d55bc5ea5b27ffdfe37704, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before 1d6c02b86329883aa467a3a61f8d34369db73a2f, 5cd667b0a4567048bb555927d6ee564f4e5620a9 to before 2091c6aa0df6aba47deb5c8ab232b1cb60af3519
Linux

Linux · 3.17
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/openvswitch/datapath.c, net/openvswitch/vport.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A CAP_NET_ADMIN user can install a PID array large enough to overflow the reply buffer, causing nla_put() to fail with -EMSGSIZE and hitting BUG_ON(err < 0). NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.