01 Record

CVE-2026-46120

ip6_gre: Use cached t->net in ip6erspan_changelink().

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ip6_gre: Use cached t->net in ip6erspan_changelink().

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.7% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Undergoing Analysis. NVD last modified this record on 2026-06-24.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-28 09:35Z3 MO AGO

Last updated

2026-08-05 12:29Z1 MO AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant
CWE-763Release of Invalid Pointer or ReferenceBase

Data version

5.2

Document digest

6d5493fdac1b8142861b6010f3790b43f2a8a39870a1a79ccdd4cdb4dd8312cb

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2d665034f239412927b1e71329f20f001c92da09 to < 7bd0f2b162b426b343a114e1b329f0d8d14fdc6e, 2d665034f239412927b1e71329f20f001c92da09 to < 01b71ff2857d3598337de11e7840a8e3ff21553c, 2d665034f239412927b1e71329f20f001c92da09 to < 0fcf6731706f73494245a9c0d64f93bebf95bb51, 2d665034f239412927b1e71329f20f001c92da09 to < eca62bb0569de4d43a4dac06a2092a9d4ca1d702, 2d665034f239412927b1e71329f20f001c92da09 to < 311fdd26eb4443d43b909cc67a10f3a5fd1b21b2, 2d665034f239412927b1e71329f20f001c92da09 to < e70cfb40c3a99b232cd42c6a6a10f0d8e039dc82, 2d665034f239412927b1e71329f20f001c92da09 to < cf7fc624329e76c6394653d12353e1d033adea91, 2d665034f239412927b1e71329f20f001c92da09 to < 1d324c2f43f70c965f25c58cc3611c779adbe47e, c6d72628352c949629af619b77b042e0fb5245e7, 4.16.12 to < 4.17, 4.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7bd0f2b162b426b343a114e1b329f0d8d14fdc6e
git.kernel.orghttps://git.kernel.org/stable/c/01b71ff2857d3598337de11e7840a8e3ff21553c
git.kernel.orghttps://git.kernel.org/stable/c/0fcf6731706f73494245a9c0d64f93bebf95bb51
git.kernel.orghttps://git.kernel.org/stable/c/eca62bb0569de4d43a4dac06a2092a9d4ca1d702
git.kernel.orghttps://git.kernel.org/stable/c/311fdd26eb4443d43b909cc67a10f3a5fd1b21b2
git.kernel.orghttps://git.kernel.org/stable/c/e70cfb40c3a99b232cd42c6a6a10f0d8e039dc82
git.kernel.orghttps://git.kernel.org/stable/c/cf7fc624329e76c6394653d12353e1d033adea91
git.kernel.orghttps://git.kernel.org/stable/c/1d324c2f43f70c965f25c58cc3611c779adbe47e

01 Record index

CVE-2026-46120

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-46120

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References