01 Record

CVE-2026-46103

can: ucan: fix devres lifetime

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

can: ucan: fix devres lifetime

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.11% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 1.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-25.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-27 12:59Z3 MO AGO

Last updated

2026-06-19 11:59Z2 MO AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

ecfa45c5d0a770455cce19c30ca319b88bcc68b1bf2901a4ac39f68e465ba2fd

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux9f2d3eae88d26c29d96e42983b755940d9169cd9 to < a90f0815aaa9c629ac4750e7c71c357dd7f231d7, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < cb2e41e87a2893345859440017e7178bf7a4c70d, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < 3df5b9110ac08f67ccfe382fc172bfee95688eec, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < 4b7d07747400cfd7eff1ba7b8b5a7c8d5a58f705, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < 10b7b676b78a7bd888d19729b459aad7fc1f428b, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < c524c124e3094d2de12235a513854c03d06a2b58, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < c0d3ccc6929e4509076df8f30a4fb1dc5018b0ae, 9f2d3eae88d26c29d96e42983b755940d9169cd9 to < fed4626501c871890da287bec62a96e52da1af89, 4.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a90f0815aaa9c629ac4750e7c71c357dd7f231d7
git.kernel.orghttps://git.kernel.org/stable/c/cb2e41e87a2893345859440017e7178bf7a4c70d
git.kernel.orghttps://git.kernel.org/stable/c/3df5b9110ac08f67ccfe382fc172bfee95688eec
git.kernel.orghttps://git.kernel.org/stable/c/4b7d07747400cfd7eff1ba7b8b5a7c8d5a58f705
git.kernel.orghttps://git.kernel.org/stable/c/10b7b676b78a7bd888d19729b459aad7fc1f428b
git.kernel.orghttps://git.kernel.org/stable/c/c524c124e3094d2de12235a513854c03d06a2b58
git.kernel.orghttps://git.kernel.org/stable/c/c0d3ccc6929e4509076df8f30a4fb1dc5018b0ae
git.kernel.orghttps://git.kernel.org/stable/c/fed4626501c871890da287bec62a96e52da1af89

01 Record index

CVE-2026-46103

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-46103

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References