Get real-time updates on Telegram
CVE-2026-46294: linux kernel 2.6.12; +2 more affected products
CVE-2026-46294. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.0019 (percentile 0.08085), scored 14-Oct-2026.
Affected technology
linux kernel · from 2.6.12.1 (inclusive), before 5.10.258 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux
linux kernel · 2.6.12
linux
linux kernel · 2.6.12 · update rc2
linux
linux kernel · 2.6.12 · update rc3
linux
linux kernel · 2.6.12 · update rc4
linux
linux kernel · 2.6.12 · update rc5
linux
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8c5311237448f6ffeecc9aec2362e3692623668, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 448ee8fb79c26a26599ffa4b2adeb4322d3d3d8c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 526ff9126a0ae087b65726e1faf31114c718020d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f0b0b09d9840838ae77ccdd6a62de0daef4e6e0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d271631023cbe1cbe7c31a0275ab797883be6e0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5af6a879e915ae7bcd83695c316ebb32e1c61bc2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8daa6c708ef524089ae43f2aed9190acb26d7df8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2fa49cc884f6496a915c35621ba4da35649bf159
Linux
Linux · 2.6.12
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
Function: retrieve_status:
File: drivers/md/dm-ioctl.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-787
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.0019 · percentile 0.08085 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-46294.html