PT-2026-43914 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-46047

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the QRTR nameservice driver during the remove() process. If a packet arrives after destroy workqueue() is called but before sock release(), the qrtr ns data ready() callback attempts to queue work, leading to a memory access violation. This occurs because the work structure is dereferenced after it has been destroyed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46047

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-46047 · Security Note
• https://git.kernel.org/stable/c/f96779e916576e81430ebb326baff6e433fef8ae · Note
• https://git.kernel.org/stable/c/0f313eb6a8f6dffa491373cf3afab979fa1c02f4 · Note
• https://git.kernel.org/stable/c/db3c60ec772de30acae92d560dfcc5258e58dbe8 · Note
• https://git.kernel.org/stable/c/2e127ceb1c415e246076d8e09e23e443a7a2038f · Note
• https://twitter.com/windowsforum/status/2059923200763396433 · Twitter Post
• https://git.kernel.org/stable/c/7809fea20c9404bfcfa6112ec08d1fe1d3520beb · Note