PT-2026-43873 · Linux+1 · Linux Kernel+1

Danilo · CVE-2026-46006 · Published 2026-05-27 · Updated 2026-07-31

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A 32-bit integer overflow exists in the nouveau gem pushbuf reloc apply() function within the drm/nouveau component. The issue occurs during the validation of relocations where the addition of the reloc bo offset variable and the integer literal 4 is performed using 32-bit arithmetic. This causes the value to wrap around before it is compared against the bo.base.size (a size t value), potentially bypassing the bounds check.

Recommendations Cast the addition to u64 to ensure the operation is performed using 64-bit arithmetic. For openSUSE Tumbleweed, update to the kernel-devel-7.0.11-1.1 package.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-46006

ECHO-1C90-F30A-BDAA

OESA-2026-2579

OESA-2026-2676

OESA-2026-3157

OPENSUSE-SU-2026:10954-1

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8507-1

USN-8567-1

USN-8569-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8575-1

USN-8575-2

USN-8575-3

USN-8576-1

USN-8576-2

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8597-1

USN-8603-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8610-1

USN-8619-1

USN-8620-1

USN-8620-2

USN-8620-3

USN-8620-4

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 3364

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46006.json · Exploit
• https://ubuntu.com/security/CVE-2026-53320 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53358 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47327 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63861 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53293 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43265 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43382 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23306 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31600 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31458 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45893 · Security Note