CVE-2026-45991

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.17% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 6.6% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-19.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-05-27 12:55Z3 MO AGO

Last updated

2026-08-05 12:29Z1 MO AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

7e4e387e3183769fc122554c616be89537211d0b5cfa84a34f50ca041eed66d1

• git.kernel.orghttps://git.kernel.org/stable/c/ad3c0c4400686f6f37b382aaa48fac2b9aefccbe
• git.kernel.orghttps://git.kernel.org/stable/c/68013a9bd4c01acd42073715f00e1a1992f089ee
• git.kernel.orghttps://git.kernel.org/stable/c/e8474cfbac9ada2cdaa4eaedec22aadfa0f58559
• git.kernel.orghttps://git.kernel.org/stable/c/058b451b1039f056d1362c4fec2229e522366ab0
• git.kernel.orghttps://git.kernel.org/stable/c/b5597bb83fc37b5b5da74a4453fa920b932cf39a
• git.kernel.orghttps://git.kernel.org/stable/c/08fa5d818e5bf53c7ca234d88ba334f32004e9b6
• git.kernel.orghttps://git.kernel.org/stable/c/08841b06fa64d8edbd1a21ca6e613420c90cc4b8