Get real-time updates on Telegram
CVE-2026-46152: linux kernel from 6.4 (inclusive), before 6.6.140 (exclusive), from 6.7 (inclusive), before 6.12.88 (exclusive), from…
CVE-2026-46152. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00237 (percentile 0.13616), scored 15-Oct-2026.
Affected technology
linux kernel · from 6.4 (inclusive), before 6.6.140 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
Linux · 3468e1e0c639032a603450f0830ccabfa76f5806 to before 03584528bfffb195e384698af9148b94e42e3f14, 3468e1e0c639032a603450f0830ccabfa76f5806 to before 1739fc31b4de06c5c78ce0741182770fb079091e, 3468e1e0c639032a603450f0830ccabfa76f5806 to before e131562d6f2b958148c35c98831b007f47f0e3d3, 3468e1e0c639032a603450f0830ccabfa76f5806 to before 3ef44f96ccc3e06e059dec57842e366f0c4b1893, 3468e1e0c639032a603450f0830ccabfa76f5806 to before 7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba
Linux
Linux · 6.4
Linux
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat
Component: Not specified by the source
File: net/mac80211/rx.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-1058
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00237 · percentile 0.13616 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-46152.html