PT-2026-44316 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-19 · CVE-2026-46193

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm AH implementation where the system fails to account for Extended Sequence Number (ESN) high bits in asynchronous callbacks. When ESN is enabled, the asynchronous ahash setup appends a 4-byte seqhi slot before the Integrity Check Value (ICV) or authentication data area. However, the asynchronous completion callbacks reconstruct the temporary layout as if seqhi were absent. This causes the system to copy or compare incorrect bytes on both IPv4 and IPv6 paths, leading to packet loss in environments using asynchronous AH implementations. This behavior contradicts RFC 4302, which requires the high-order 32 bits of the ESN to participate in the AH ICV computation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-46193

ECHO-221F-AC87-073C

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 296

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46193.json · Exploit
• https://git.kernel.org/stable/c/0555d4f526232b3c9e3afbcd490c0c0793aefec6 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46193 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-46193 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46193 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46193 · Vendor Advisory
• https://git.kernel.org/stable/c/7db99a09b3bc87268287bc7ab5f2e7f382b5ad87 · Patch
• https://git.kernel.org/stable/c/ec54093e6a8f87e800bb6aa15eb7fc1e33faa524 · Patch
• https://ubuntu.com/security/CVE-2026-46193 · Vendor Advisory
• https://git.kernel.org/stable/c/2ffaa7a94f9a4d22724364a1821735a0231d9f8d · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-46193 · Vendor Advisory
• https://git.kernel.org/stable/c/729899a2aa8bda7844be0cdcd3b470f11b912eda · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46193 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46193 · Vendor Advisory