CVE-2026-46037

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.43% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 35.9% of scored records. A rank, not a probability.

NVD base score

8.2 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-05-27 12:56Z3 MO AGO

Last updated

2026-08-05 12:29Z29 DAYS AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.2)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Weaknesses

• CWE-1285Improper Validation of Specified Index, Position, or Offset in InputBase

Data version

5.2

Document digest

7ce2802ed4c327014d56ab2ed68c7b72f0a26a72315b3043dda9d214d0fc75e6

• git.kernel.orghttps://git.kernel.org/stable/c/b3a88fc5ae024d43c5ecf653f3bbe837e4a6dc99
• git.kernel.orghttps://git.kernel.org/stable/c/93df2af4f491de33827550b9d420f01808c0706b
• git.kernel.orghttps://git.kernel.org/stable/c/92e7c209036dcc0e8ffdf806fdfd3645b263bea5
• git.kernel.orghttps://git.kernel.org/stable/c/bc64a66e0b9ad937d3d49934242ee62b01ba9a94
• git.kernel.orghttps://git.kernel.org/stable/c/c2178ff1c70ebfc2ab9651b230c58a34683db759
• git.kernel.orghttps://git.kernel.org/stable/c/d700c34a5d186b9ba0715bcb19e0ff80ffbfbfc1
• git.kernel.orghttps://git.kernel.org/stable/c/67bf002a2d7387a6312138210d0bd06e3cf4879b