P4Verified

CVE-2026-46037: linux kernel from 5.13 (inclusive), before 5.15.209 (exclusive), from 5.16 (inclusive), before 6.1.175 (exclusive)…

CVE-2026-46037. CVSS 3.1 base score 8.2 (HIGH, Source advisory). EPSS 0.00633 (percentile 0.49147), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.13 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.86 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.27 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.4 (exclusive)
linux

Linux · d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before b3a88fc5ae024d43c5ecf653f3bbe837e4a6dc99, d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before 93df2af4f491de33827550b9d420f01808c0706b, d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before 92e7c209036dcc0e8ffdf806fdfd3645b263bea5, d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before bc64a66e0b9ad937d3d49934242ee62b01ba9a94, d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before c2178ff1c70ebfc2ab9651b230c58a34683db759, d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before d700c34a5d186b9ba0715bcb19e0ff80ffbfbfc1, d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before 67bf002a2d7387a6312138210d0bd06e3cf4879b
Linux

Linux · 5.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/icmp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as low; integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CCR priority: 33.0 /100 (P4)
CVSS 3.1: 8.2 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · Source advisory
EPSS: 0.00633 · percentile 0.49147 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-46037.html