PT-2026-44334 · Linux · Linux Kernel

CVE-2026-46211 · Published 2026-05-28 · Updated 2026-06-10

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the msm ioctl gem info get metadata() function where it unconditionally returns 0, ignoring error codes stored in ret. This occurs when the user buffer is too small or copy to user() fails, misleading userspace into believing the operation succeeded. Furthermore, the function fails to check if kmemdup() returns NULL during allocation failure, which leads to a NULL pointer dereference—a condition where the system attempts to read or write to a memory address that is null—during the subsequent copy to user() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-46211

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 292

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46211.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2026-46211 · Vendor Advisory
• https://git.kernel.org/stable/c/c57c861956b89f2e2528e6384d51e2dedd915809 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46211 · Vendor Advisory
• https://git.kernel.org/stable/c/b079e85c91f446f29e808d8291189e897f1884ff · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-46211 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-46211 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46211 · Vendor Advisory
• https://git.kernel.org/stable/c/47cbfe2608314b833ad61a65827d8fb363bc2d2d · Patch
• https://ubuntu.com/security/CVE-2026-46211 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46211 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46211 · Vendor Advisory
• https://git.kernel.org/stable/c/697e1a9559f6962f999cc4c748c2ffffcc0a7a7a · Patch
• https://suse.com/security/cve/CVE-2026-46166 · Note