PT-2026-43893 · Linux+1 · Linux Kernel+1

CVE-2026-46026 · Published 2026-05-27 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description The net:qrtr:ns component lacks bound checking on the number of lookups a client can perform. A malicious local client could send a flood of NEW LOOKUP messages over the same socket to cause issues.

Recommendations Update to a version where the maximum number of lookups is limited to 64 globally. Update to kernel-devel-7.0.11-1.1 or a newer version.

Exploit

Fix

Related Identifiers

CVE-2026-46026

ECHO-69C8-5FFD-6C0D

OPENSUSE-SU-2026:10954-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8507-1

USN-8567-1

USN-8569-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 1505

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46026.json · Exploit
• https://ubuntu.com/security/CVE-2026-45842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23339 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31583 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31545 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52944 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31577 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46131 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8489-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43457 · Vendor Advisory