PT-2026-47366 · Linux · Linux Kernel

CVE-2026-46294 · Published 2026-06-08 · Updated 2026-07-31

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the retrieve status() function within dm-ioctl. The issue occurs when the outptr variable is aligned to the next 8-byte boundary using align ptr(outptr) without checking for overflow. If outptr points beyond the buffer end, the calculation of the remaining variable wraps around, resulting in an unusually high value. This leads to data being written past the end of the buffer. Access to device mapper ioctls is restricted to root users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-46294

ECHO-8F6C-41A3-8F0B

OPENSUSE-SU-2026:11014-1

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8566-1

USN-8567-1

USN-8568-1

USN-8569-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8575-1

USN-8575-2

USN-8575-3

USN-8576-1

USN-8576-2

USN-8593-1

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8603-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8610-1

USN-8618-1

USN-8619-1

USN-8620-1

USN-8620-2

USN-8620-3

USN-8620-4

Affected Products

Linux Kernel

References · 3123

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46294.json · Exploit
• https://ubuntu.com/security/CVE-2026-52916 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43371 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-64001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52959 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31580 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-64129 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46157 · Vendor Advisory
• https://git.kernel.org/stable/c/f0b0b09d9840838ae77ccdd6a62de0daef4e6e0a · Patch
• https://ubuntu.com/security/CVE-2026-31576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45928 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23361 · Vendor Advisory