PT-2026-43906 · Linux+1 · Linux Kernel+1

CVE-2026-46039 · Published 2026-05-27 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description An integer overflow can occur in the rxgk extract token() function when checking the length of a ticket. This happens because the system rounds up the value being tested, which may lead to an overflow. The issue is resolved by rounding down the size of the available data instead.

Recommendations Update to version 7.0.11-1.1.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-46039

OPENSUSE-SU-2026:10954-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8490-1

USN-8490-2

USN-8491-1

USN-8507-1

USN-8508-1

USN-8545-1

USN-8546-1

USN-8569-1

USN-8603-1

USN-8604-1

USN-8605-1

Affected Products

Linuxmint

Linux Kernel

References · 1632

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46039.json · Exploit
• https://ubuntu.com/security/CVE-2026-64038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53023 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23144 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63910 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31504 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53376 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63944 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46303 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46203 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52958 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23053 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45986 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-64093 · Vendor Advisory