PT-2026-43883 · Opensuse+1 · Opensuse Tumbleweed+1

CVE-2026-46016 · Published 2026-05-27 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A NULL pointer dereference issue exists in the remoteproc xlnx component. The system may crash if the receive callback does not verify whether the message is NULL before accessing buffer information when an Inter-Processor Interrupt (IPI), a mechanism for one processor to signal another, is buffered.

Recommendations Update to kernel-devel-7.0.11-1.1 for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-46016

OPENSUSE-SU-2026:10954-1

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8507-1

USN-8567-1

USN-8569-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8603-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8619-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 3131

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46016.json · Exploit
• https://ubuntu.com/security/CVE-2026-64049 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31730 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63910 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63841 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43445 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31720 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-64075 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45938 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45991 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63860 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68736 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23343 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46223 · Vendor Advisory