CVE-2026-46064: linux kernel 2.6.12; +2 more affected products

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.86 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.27 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.4 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ca1c857e2bb74a9fc0606128334f85316d57067b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b870f652877bfbe321bd0f4096fc37a93296f7b6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ce57fa439bd1b5d664f334a0c3e3f0e42abb0153, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd19eb1c75047a4ed4e855f56cafd704dc3914e0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fe31722b0194ff76bf8b461e8bf97a2081147787, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c1c2417c60dbdca5ebb00462f21ee71c2d7f7083, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9e8f6c9d4ecddda2f28baa1678340286cff3969c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9aad71144fa3682cca3837a06c8623016790e7ec
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: uses
File: drivers/misc/ibmasm/lowlevel.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A root user can write a small buffer with inflated header fields, causing memcpy_toio() to read up to ~65 KB past the end of the allocation into adjacent kernel heap, which is then forwarded to the service processor over MMIO. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none.