01 Record

CVE-2026-46227

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.10% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 1.2% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-25.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-05-28 09:40Z3 MO AGO
Last updated: 2026-08-25 12:05Z10 DAYS AGO
Reserved: 2026-05-13
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 6cff2da823eea2e86068f4b4dba662b1f42eeb8c32c67d2663e0002c374cf5e4

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4910280503f3af2857d5aa77e35b22d93a8960a8 to < f3a3f0b406b4b7eb3cea35a23fa2bf170848b104, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < 0dbc8cde64280fc37cdd678cced34eaf96cfb197, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < 0c7b55974f97b78d1109025eadf084e74cbf330f, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < 1bfb06ecb00f7fdf35dba8e8f2877346cbe5e078, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < 6187a172d6ed57d6b2c327836e4407c6456e639d, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < c9dadb31f36045a8cb65df4bd75e7237ef21a4b5, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < bf0f40d8107e2ce827521968dc6926f3e13728ae, 4910280503f3af2857d5aa77e35b22d93a8960a8 to < abb5f36771cc4c05899b34000829a787572a8817, 4.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f3a3f0b406b4b7eb3cea35a23fa2bf170848b104
git.kernel.orghttps://git.kernel.org/stable/c/0dbc8cde64280fc37cdd678cced34eaf96cfb197
git.kernel.orghttps://git.kernel.org/stable/c/0c7b55974f97b78d1109025eadf084e74cbf330f
git.kernel.orghttps://git.kernel.org/stable/c/1bfb06ecb00f7fdf35dba8e8f2877346cbe5e078
git.kernel.orghttps://git.kernel.org/stable/c/6187a172d6ed57d6b2c327836e4407c6456e639d
git.kernel.orghttps://git.kernel.org/stable/c/c9dadb31f36045a8cb65df4bd75e7237ef21a4b5
git.kernel.orghttps://git.kernel.org/stable/c/bf0f40d8107e2ce827521968dc6926f3e13728ae
git.kernel.orghttps://git.kernel.org/stable/c/abb5f36771cc4c05899b34000829a787572a8817
access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-46227vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2482564https://bugzilla.redhat.com/show_bug.cgi?id=2482564issue-trackingx_refsource_REDHAT
security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46227.jsonx_sadp-csaf-vex
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:27731vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36956vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:26515vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:27735vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:34094vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36018vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59143vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36349vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59146vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:26535vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33899vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:26563vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59142vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59147vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59145vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59148vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:59149vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36348vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:26462vendor-advisoryx_refsource_REDHAT

01 Record index

CVE-2026-46227

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-46227

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References