01 Record

CVE-2026-46065

fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.13% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 2.5% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Undergoing Analysis. NVD last modified this record on 2026-10-19.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-27 12:57Z5 MO AGO

Last updated

2026-10-19 19:26Z9 DAYS AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant
CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

0002f0060183535262c09b4cb131f81a57be8361a9d258172a4161bd66077ba7

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux60b59beafba875aef6d378078bce0baf2287ae14 to < 4aab89603b637a2e441b38808c4f6fe7d1184df6, 60b59beafba875aef6d378078bce0baf2287ae14 to < 4fda0d6b45faad44926dd3e4f55f118d899b2e27, 60b59beafba875aef6d378078bce0baf2287ae14 to < 2a40f8bc9bb713329f1c35ffc199ee961a7135b0, 60b59beafba875aef6d378078bce0baf2287ae14 to < 2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066, 60b59beafba875aef6d378078bce0baf2287ae14 to < 25c2b77bc463f29ee71a54b883548baf9386a0db, 60b59beafba875aef6d378078bce0baf2287ae14 to < a0aafb421dd15e935d81543152617f2742cefa70, 60b59beafba875aef6d378078bce0baf2287ae14 to < 9ded47ad003f09a94b6a710b5c47f4aa5ceb7429, 2.6.22—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/4aab89603b637a2e441b38808c4f6fe7d1184df6
git.kernel.orghttps://git.kernel.org/stable/c/4fda0d6b45faad44926dd3e4f55f118d899b2e27
git.kernel.orghttps://git.kernel.org/stable/c/2a40f8bc9bb713329f1c35ffc199ee961a7135b0
git.kernel.orghttps://git.kernel.org/stable/c/2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066
git.kernel.orghttps://git.kernel.org/stable/c/25c2b77bc463f29ee71a54b883548baf9386a0db
git.kernel.orghttps://git.kernel.org/stable/c/a0aafb421dd15e935d81543152617f2742cefa70
git.kernel.orghttps://git.kernel.org/stable/c/9ded47ad003f09a94b6a710b5c47f4aa5ceb7429
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.88-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.