PT-2026-43870 · Linux+1 · Linux Kernel+1

CVE-2026-46003 · Published 2026-05-27 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description The nameserver in the Qualcomm Router (qrtr) network subsystem does not limit the number of nodes it handles. A malicious client could register a large number of random nodes, resulting in memory exhaustion, which is a state where the system consumes all available RAM and becomes unresponsive.

Recommendations Update to a version of the Linux kernel where the maximum number of nodes is limited to 64. Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1.

Exploit

Fix

Related Identifiers

CVE-2026-46003

ECHO-D1FE-78FD-E4A3

OPENSUSE-SU-2026:10954-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8507-1

USN-8567-1

USN-8569-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8603-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8619-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 2169

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46003.json · Exploit
• https://ubuntu.com/security/CVE-2026-63891 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63947 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52962 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63941 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46054 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-64019 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-64161 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46181 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31424 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8607-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53121 · Vendor Advisory