P4Verified

CVE-2026-46306: linux kernel from 6.0 (inclusive), before 6.1.175 (exclusive), from 6.2 (inclusive), before 6.6.140 (exclusive), from…

CVE-2026-46306. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00437 (percentile 0.36431), scored 14-Oct-2026.

Affected technology

linux kernel · from 6.0 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.140 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.88 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.30 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.7 (exclusive)
linux

Linux · 10f665b52a75df6eb26ddebbbc072ee264183731 to before e7c811ca372d53c2be7d01a1614e71fae1054836, d7e541e86122d21f71eb71c5dfa7fb1eb6623fe8 to before abc5bc84e0f2edc7ea2d437afa6ef3fe1fc43200, 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 18ae9eacfc95cc715c0606b2c86e8aa8a86cf3e3, 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before db104b0d8a7856397c0469d83a4289adf7c54863, 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 6044392d9cace3a3672b02c8bc7d38b502e51734, 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 0d00b9015069712944934bab09eaa6c542143049, 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 7c93f353eab4ea911e394630f07d72e040a729d8, 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before d6c19b31a3c1d519fabdcf0aa239e6b6109b9473
Linux

Linux · 6.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/flow_dissector.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CCR priority: 30.1 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
EPSS: 0.00437 · percentile 0.36431 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-46306.html