Get real-time updates on Telegram
CVE-2026-46090: linux kernel from 2.6.37 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…
CVE-2026-46090. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00103 (percentile 0.00933), scored 15-Oct-2026.
Affected technology
linux kernel · from 2.6.37 (inclusive), before 5.10.259 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.12.88 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.27 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.4 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
Linux · 597603d615d2b19a9e451d8cfac24372856a522d to before 83bd62fa9620ac98d5d694bde14c50f98c8e7189, 597603d615d2b19a9e451d8cfac24372856a522d to before 345c24b2bcf0923dfae1ab41497351c68214ff76, 597603d615d2b19a9e451d8cfac24372856a522d to before 3727a3541788412c393eec236ad228d72efe19c7, 597603d615d2b19a9e451d8cfac24372856a522d to before d258cdce50ff3e02392917258e81a0ce9555c327, 597603d615d2b19a9e451d8cfac24372856a522d to before 03f52a9c170431e8f10e156b9dc0dae80b3e9198, 597603d615d2b19a9e451d8cfac24372856a522d to before bdd9503c3d222d2735b56c7a8b4422ccf3de6e5c, 597603d615d2b19a9e451d8cfac24372856a522d to before 5d45e34bf001344e2966dabca1897561bbc9e913, 597603d615d2b19a9e451d8cfac24372856a522d to before e5c33cdc6f402eab8abd36ecf436b22c9d3a8aff
Linux
Linux · 2.6.37
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: sound/drivers/aloop.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-364, CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00103 · percentile 0.00933 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-46090.html