← Back to Vulnerability Reports CVE Intelligence

CVE-2026-46331

Linux Kernel•HIGH · CVSS 7.8•No exploitation reported

What is CVE-2026-46331?

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account for the runtime header offset added by typed keys. This can leave part of the write region un-COW'd. Fix by moving skb_ensure_writable() inside the per-key loop where the actual write offset is known, and add overflow checking on the offset arithmetic. For negative offsets (e.g. Ethernet header edits at ingress), use skb_cow() to COW the headroom instead. Guard offset_valid() against INT_MIN, where negation is undefined.

CVSS7.8 NVD 3.1

SeverityHIGH

ExploitationNo exploitation reported

EPSS1% · P51

Triage statusNo Known Exploit

ActionPatch this week

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWECWE-190, CWE-787

NVD published2026-06-16

NVD last modified2026-10-15

Timeline

2026-06-16Published to the U.S. National Vulnerability Database (NVD)
2026-06-27First covered in a defend.network daily briefing
2026-10-15NVD record last updated

Affected product

Linux Kernel

Remediation Steps

Apply the latest Linux kernel security patch addressing the pedit COW out-of-bounds write vulnerability
Verify all systems running affected kernel versions are identified and prioritized
Test patches in staging environment before production deployment
Monitor systems for signs of privilege escalation attempts

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 5 of June 2026 (June 29 – July 5)
Vulnerability Priority Report – Week 4 of June 2026 (June 22 – 28)
Signal backup keys targeted; Linux kernel RCE; AWS Q credential theft (2026-06-27)

Related vulnerabilities

CVE-2026-53362 – Linux Kernel (same product)
CVE-2026-53266 – Linux Kernel (same product)
CVE-2026-46300 – Linux Kernel (same product)
CVE-2026-102489 – Zammad GmbH Zammad (same product)
CVE-2026-102490 – Zammad GmbH Zammad (same product)
CVE-2026-87886 – Acronis Backup (same product)

Linux: 32 known exploited vulnerabilities (CISA KEV) →

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.