CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-46054: linux kernel from 4.19 (inclusive), before 7.0.4 (exclusive); +15 more affected products

CVE-2026-46054. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.00123 (percentile 0.01858), scored 15-Oct-2026.

Affected technology

linux kernel · from 4.19 (inclusive), before 7.0.4 (exclusive)
linux

Linux · 2f502839e85ab265f03f25f30d6463154aee5473 to before bc6c380c1159de52a252ed11f19a42c47f60a735, 2f502839e85ab265f03f25f30d6463154aee5473 to before 8bacd09f12c27710228562e4d13163e58c5f4a45, 2f502839e85ab265f03f25f30d6463154aee5473 to before d844702198395d3f80222777030f69db6be6b709, 2f502839e85ab265f03f25f30d6463154aee5473 to before cd0e707a927a70cdfd8bc5a512a9719a87f5ed51, 2f502839e85ab265f03f25f30d6463154aee5473 to before 82544d36b1729153c8aeb179e84750f0c085d3b1
Linux

Linux · 4.19
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: security/selinux/hooks.c, security/selinux/include/objsec.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as high; availability impact as none. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-280
CCR priority
28.4 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · Source advisory
EPSS
0.00123 · percentile 0.01858 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-46054.html