PT-2026-44311 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-04 · CVE-2026-46188

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description A NULL pointer dereference occurs in the octeon ep vf driver. The function napi build skb() can return NULL if an allocation failure occurs. In octep vf oq process rx(), the result of this function is used directly without a NULL check in both the single-buffer and multi-fragment paths.

Recommendations Update to version 7.0.11-1.1.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-46188

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 291

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46188.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46188 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-46188 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46188 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46188 · Security Note
• https://git.kernel.org/stable/c/60246cdd4c515ea7d920cddf48932efcb990773e · Patch
• https://git.kernel.org/stable/c/dd66b42854705e4e4ee7f14d260f86c578bed3e3 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-46188 · Vendor Advisory
• https://git.kernel.org/stable/c/b0f4711b426a06fb4c4be85c36b9f5588d5140d3 · Patch
• https://git.kernel.org/stable/c/6fef6640bbf360e254cc0174365ed30ce3a07572 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46188 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46188 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-46166 · Note