Get real-time updates on Telegram
CVE-2026-46021: linux kernel from 4.2 (inclusive), before 6.6.140 (exclusive), from 6.7 (inclusive), before 6.12.86 (exclusive), from…
CVE-2026-46021. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00138 (percentile 0.02859), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.2 (inclusive), before 6.6.140 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.86 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.27 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.4 (exclusive)
linux
Linux · e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before a172fa18bc370b776ac1510abb0dcb50a7a35fac, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 8e563d8db50f303171aceb79eec0807e7ba06951, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before d4eb861adde5ce22e459fbd29366f47bb2167977, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 37a430a2d4e66ec8238da6c7f7e48809bf265e13, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before f412e541d25a3dfaf3d53e012ade6ff03cae8a45, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 75f8f3c3e09122270986de9d7aa347d701676761, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 64d4ebf91d082034bbc5ae3ba2d7fd800bc02d06, e33df1d2f3a0141cd79e770f31999ba0dd7ebfa8 to before 41ff66baf81c6541f4f985dd7eac4494d03d9440
Linux
Linux · 4.2
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/thermal/thermal_core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges could trigger a use-after-free error. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.
- CWE
- CWE-401
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00138 · percentile 0.02859 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-46021.html