Get real-time updates on Telegram
CVE-2026-46120: linux kernel 4.17; +2 more affected products
CVE-2026-46120. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00126 (percentile 0.02027), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.16.12 (inclusive), before 4.17 (exclusive)
linux
linux kernel · from 4.17.1 (inclusive), before 5.10.258 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux
linux kernel · 4.17
linux
linux kernel · 4.17 · update rc7
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
Linux · 2d665034f239412927b1e71329f20f001c92da09 to before 7bd0f2b162b426b343a114e1b329f0d8d14fdc6e, 2d665034f239412927b1e71329f20f001c92da09 to before 01b71ff2857d3598337de11e7840a8e3ff21553c, 2d665034f239412927b1e71329f20f001c92da09 to before 0fcf6731706f73494245a9c0d64f93bebf95bb51, 2d665034f239412927b1e71329f20f001c92da09 to before eca62bb0569de4d43a4dac06a2092a9d4ca1d702, 2d665034f239412927b1e71329f20f001c92da09 to before 311fdd26eb4443d43b909cc67a10f3a5fd1b21b2, 2d665034f239412927b1e71329f20f001c92da09 to before e70cfb40c3a99b232cd42c6a6a10f0d8e039dc82, 2d665034f239412927b1e71329f20f001c92da09 to before cf7fc624329e76c6394653d12353e1d033adea91, 2d665034f239412927b1e71329f20f001c92da09 to before 1d324c2f43f70c965f25c58cc3611c779adbe47e, c6d72628352c949629af619b77b042e0fb5245e7, 4.16.12 to before 4.17
Linux
Linux · 4.17
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/ipv6/ip6_gre.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00126 · percentile 0.02027 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-46120.html