01 Record

CVE-2026-46333

ptrace: slightly saner 'get_dumpable()' logic

HighPUBLISHEDCNA: Linux

CNA base score7.1 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

View raw JSON

02 Description

ptrace: slightly saner 'get_dumpable()' logic

03 Exploitation and scoring

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

1.50% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 72.5% of scored records. A rank, not a probability.

NVD base score

7.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-08-24.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-15 12:58Z3 MO AGO

Last updated

2026-09-01 12:05Z3 DAYS AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.1)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-269Improper Privilege ManagementClass

Data version

5.2

Document digest

653bebc9783ac267b06783d80ae61cb5b6878e465901e45dcb82a9fcf244870d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxbfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 15b828a46f305ae9f05a7c16914b3ce273474205, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 4709234fd1b95136ceb789f639b1e7ea5de1b181, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 8f907d345bae8f4b3f004c5abc56bf2dfb851ea7, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 2a93a4fac7b6051d3be7cd1b015fe7320cd0404d, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 01363cb3fbd0238ffdeb09f53e9039c9edf8a730, bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 to < 31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a, d5b3e840dbf6dd2c0f30b5982b6f5ecd49e46b12, 03eed7afbc09e061f66b448daf7863174c3dc3f3, e45692fa1aea06676449b63ef3c2b6e1e72b7578, 694a95fa6dae4991f16cda333d897ea063021fed, 3.16.52 to < 3.17, 4.4.40 to < 4.5, 4.8.16 to < 4.9, 4.9.1 to < 4.10, 4.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6
git.kernel.orghttps://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205
git.kernel.orghttps://git.kernel.org/stable/c/4709234fd1b95136ceb789f639b1e7ea5de1b181
git.kernel.orghttps://git.kernel.org/stable/c/8f907d345bae8f4b3f004c5abc56bf2dfb851ea7
git.kernel.orghttps://git.kernel.org/stable/c/6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d
git.kernel.orghttps://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d
git.kernel.orghttps://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730
git.kernel.orghttps://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/15/9
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2026/05/msg00032.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2026/05/msg00035.html
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/20/14
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/20/16
github.comhttps://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/exploit
access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-46333vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2477802https://bugzilla.redhat.com/show_bug.cgi?id=2477802issue-trackingx_refsource_REDHAT
security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46333.jsonx_sadp-csaf-vex
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19540vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33486vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:21701vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:21702vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:20299vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19569vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19705vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:20593vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:20054vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:20129vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19568vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19666vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:23470vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:20130vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:20051vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19521vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:23471vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:23469vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:24814vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:23468vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19664vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19711vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19875vendor-advisoryx_refsource_REDHAT
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-46333

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-46333

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References