PT-2026-47783 · Linux+1 · Linux Kernel+1

CVE-2026-46325 · Published 2026-06-09 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RDMA/rxe component regarding incorrect iova-to-va (I/O virtual address to virtual address) conversion when memory regions (MRs) have page sizes different from the system PAGE SIZE. The problem occurs because the rxe set page() function is called using mr->page size increments, while the page list stores individual pointers representing the system PAGE SIZE. This discrepancy leads to incorrect address calculations when the MR page size is either smaller or larger than the system page size, which has been reported to cause kernel panics.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-46325

USN-8490-1

USN-8490-2

USN-8491-1

USN-8508-1

USN-8545-1

USN-8546-1

USN-8604-1

USN-8605-1

Affected Products

Linuxmint

Linux Kernel

References · 322

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46325.json · Exploit
• https://ubuntu.com/security/CVE-2026-23129 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46325 · Security Note
• https://ubuntu.com/security/CVE-2026-23145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23102 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23011 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23170 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23031 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43304 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46043 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23428 · Vendor Advisory