PT-2026-44314 · Linux+1 · Linux Kernel+1

Published 2026-05-28 · Updated 2026-06-19 · CVE-2026-46191

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description An out-of-bounds font access occurs in the fbcon rotate font() function when console rotation fails. The system retains the old buffer, which is too small for the rotated font. Consequently, printing to the rotated console using a sufficiently high character code results in a font buffer overflow.

Recommendations Update the Linux kernel to a version where the fbcon rotate font() function clears the font buffer upon reallocation failure. Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-46191

ECHO-925B-0090-45A5

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 297

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46191.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-46191 · Vendor Advisory
• https://git.kernel.org/stable/c/ab6c34b9829d5de03f1d08a47a2253729a6e7e27 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/594973a2e54924d8ba31c9faac669fc1ba6fcb80 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-46191 · Vendor Advisory
• https://git.kernel.org/stable/c/e4ef723d8975a2694cc90733a6b888a5e2841842 · Patch
• https://ubuntu.com/security/CVE-2026-46191 · Vendor Advisory
• https://git.kernel.org/stable/c/b44cc78ff46b96e72d333a3be6aaaa0a14797263 · Patch
• https://git.kernel.org/stable/c/7105d9f1387d63b15c9a860674fc92c959181f2f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46191 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46191 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46191 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-46191 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46191 · Vendor Advisory