CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-46120: linux kernel 4.17; +2 more affected products

CVE-2026-46120. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00126 (percentile 0.02027), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.16.12 (inclusive), before 4.17 (exclusive)
linux

linux kernel · from 4.17.1 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux

linux kernel · 4.17
linux

linux kernel · 4.17 · update rc7
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

Linux · 2d665034f239412927b1e71329f20f001c92da09 to before 7bd0f2b162b426b343a114e1b329f0d8d14fdc6e, 2d665034f239412927b1e71329f20f001c92da09 to before 01b71ff2857d3598337de11e7840a8e3ff21553c, 2d665034f239412927b1e71329f20f001c92da09 to before 0fcf6731706f73494245a9c0d64f93bebf95bb51, 2d665034f239412927b1e71329f20f001c92da09 to before eca62bb0569de4d43a4dac06a2092a9d4ca1d702, 2d665034f239412927b1e71329f20f001c92da09 to before 311fdd26eb4443d43b909cc67a10f3a5fd1b21b2, 2d665034f239412927b1e71329f20f001c92da09 to before e70cfb40c3a99b232cd42c6a6a10f0d8e039dc82, 2d665034f239412927b1e71329f20f001c92da09 to before cf7fc624329e76c6394653d12353e1d033adea91, 2d665034f239412927b1e71329f20f001c92da09 to before 1d324c2f43f70c965f25c58cc3611c779adbe47e, c6d72628352c949629af619b77b042e0fb5245e7, 4.16.12 to before 4.17
Linux

Linux · 4.17
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_gre.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00126 · percentile 0.02027 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-46120.html