PT-2026-44342 · Opensuse+1 · Opensuse Tumbleweed+1

CVE-2026-46219 · Published 2026-05-28 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A use-after-free issue exists in the Linux kernel within the spi: mpc52xx component. The state machine work is scheduled by the interrupt handler; if not cancelled after disabling interrupts, it can lead to a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed.

Recommendations Update to kernel-devel-7.0.11-1.1 for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-46219

ECHO-0604-BD3A-B682

OPENSUSE-SU-2026:10954-1

SUSE-SU-2026:3130-1

USN-8566-1

USN-8567-1

USN-8568-1

USN-8569-1

USN-8574-1

USN-8575-1

USN-8576-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 2744

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46219.json · Exploit
• https://ubuntu.com/security/CVE-2026-46066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53082 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46110 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23365 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31747 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52998 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43168 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46130 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43503 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23318 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8574-1 · Vendor Advisory