CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-46090: linux kernel from 2.6.37 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-46090. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00103 (percentile 0.00933), scored 15-Oct-2026.

Affected technology

linux kernel · from 2.6.37 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.12.88 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.27 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.4 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

Linux · 597603d615d2b19a9e451d8cfac24372856a522d to before 83bd62fa9620ac98d5d694bde14c50f98c8e7189, 597603d615d2b19a9e451d8cfac24372856a522d to before 345c24b2bcf0923dfae1ab41497351c68214ff76, 597603d615d2b19a9e451d8cfac24372856a522d to before 3727a3541788412c393eec236ad228d72efe19c7, 597603d615d2b19a9e451d8cfac24372856a522d to before d258cdce50ff3e02392917258e81a0ce9555c327, 597603d615d2b19a9e451d8cfac24372856a522d to before 03f52a9c170431e8f10e156b9dc0dae80b3e9198, 597603d615d2b19a9e451d8cfac24372856a522d to before bdd9503c3d222d2735b56c7a8b4422ccf3de6e5c, 597603d615d2b19a9e451d8cfac24372856a522d to before 5d45e34bf001344e2966dabca1897561bbc9e913, 597603d615d2b19a9e451d8cfac24372856a522d to before e5c33cdc6f402eab8abd36ecf436b22c9d3a8aff
Linux

Linux · 2.6.37
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: sound/drivers/aloop.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-364, CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00103 · percentile 0.00933 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-46090.html