ptrace: slightly saner 'get_dumpable()' logic
Priority HIGH 66CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 47 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-269.
Summary
In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and makes no sense when you don't have an associated mm. And almost all users do in fact use it only for the case where the task has a mm pointer. But we have one odd special case: ptrace_may_access() uses 'dumpable' to check various other things entirely independently of the MM (typically explicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for threads that no longer have a VM (and maybe never did, like most kernel threads). It's not what this flag was designed for, but it is what it is. The ptrace code does check that the uid/gid matches, so you do have to be uid-0 to see kernel thread details, but this means that the traditional "drop capabilities" model doesn't make any difference for this all. Make it all make a *bit* more sense by saying that if you don't have a MM pointer, we'll use a cached "last dumpability" flag if the thread ever had a MM (it will be zero for kernel threads since it is never set), and require a proper CAP_SYS_PTRACE capability to override.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.04299 91st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Linux (Linux): 3.17, 4.5, 4.9 +9Red Hat: 23 advisoriesRed Hat: 47 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Linux | Linux | 3.16.52 to before 3.17; 4.4.40 to before 4.5; 4.8.16 to before 4.9; 4.9.1 to before 4.10 | 3.17, 4.5, 4.9, 4.10 | Patch available | CNA |
| Linux | Linux | 4.10 and later | 5.10.256, 5.15.207, 6.1.173, 6.6.139, 6.12.89, 6.18.31, 7.0.8, 7.1 | Patch available | CNA |
- Linux VendorLinux Affected 3.16.52 to before 3.17; 4.4.40 to before 4.5; 4.8.16 to before 4.9; 4.9.1 to before 4.10 Fixed in 3.17, 4.5, 4.9, 4.10 Patch available CNA
- Linux VendorLinux Affected 4.10 and later Fixed in 5.10.256, 5.15.207, 6.1.173, 6.6.139, 6.12.89, 6.18.31, 7.0.8, 7.1 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 3.16.52 to before 3.17; 4.4.40 to before 4.5; 4.8.16 to before 4.9; 4.9.1 to before 5.10.256; 5.11 to before 5.15.207; 5.16 to before 6.1.173; 6.2 to before 6.6.139; 6.7 to before 6.12.89; 6.13 to before 6.18.31; 6.19 to before 7.0.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | 7.1 rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | 7.1 rc2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | 7.1 rc3 | Vulnerable | Linux |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Debian |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 3.16.52 to before 3.17; 4.4.40 to before 4.5; 4.8.16 to before 4.9; 4.9.1 to before 5.10.256; 5.11 to before 5.15.207; 5.16 to before 6.1.173; 6.2 to before 6.6.139; 6.7 to before 6.12.89; 6.13 to before 6.18.31; 6.19 to before 7.0.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* Versions 7.1 rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* Versions 7.1 rc2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* Versions 7.1 rc3 Vulnerable ·Linux
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
Remediation
- Fix · CNA Linux (Linux) Fixed in 3.17, 4.5, 4.9, 4.10
- Fix · CNA Linux (Linux) Fixed in 5.10.256, 5.15.207, 6.1.173, 6.6.139, 6.12.89, 6.18.31, 7.0.8, 7.1
Red Hat 23 advisories
- RHSA-2026:33486 Released 2026-06-30 · Red Hat rating Criticalkernel security, bug fix, and enhancement update
- NVIDIA for RHEL 10 kernel-6.12.0-231.12.el10nv, kernel-64k-6.12.0-231.12.el10nv, kernel-64k-core-6.12.0-231.12.el10nv +32
- RHSA-2026:24814 Released 2026-06-09 · Red Hat rating Importantkpatch-patch security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) kpatch-patch-5_14_0-427_100_1-1-5.el9_4, kpatch-patch-5_14_0-427_113_1-1-3.el9_4, kpatch-patch-5_14_0-427_55_1-1-15.el9_4 +2
- RHSA-2026:23469 Released 2026-06-04 · Red Hat rating Importantkpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) kpatch-patch-5_14_0-284_104_1-1-16.el9_2, kpatch-patch-5_14_0-284_117_1-1-13.el9_2, kpatch-patch-5_14_0-284_134_1-1-7.el9_2 +2
Show 20 more Red Hat advisories
- RHSA-2026:23468 Released 2026-06-04 · Red Hat rating Importantkpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kpatch-patch-5_14_0-570_17_1-1-15.el9_6, kpatch-patch-5_14_0-570_39_1-1-6.el9_6, kpatch-patch-5_14_0-570_66_1-1-5.el9_6 +1
- RHSA-2026:23470 Released 2026-06-04 · Red Hat rating Importantkpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
- Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-553_109_1-1-3.el8_10, kpatch-patch-4_18_0-553_40_1-1-12.el8_10, kpatch-patch-4_18_0-553_53_1-1-10.el8_10 +2
- RHSA-2026:23471 Released 2026-06-04 · Red Hat rating Importantkpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) kpatch-patch-4_18_0-477_107_1-1-6.el8_8, kpatch-patch-4_18_0-477_120_1-1-5.el8_8, kpatch-patch-4_18_0-477_130_1-1-3.el8_8 +2
- RHSA-2026:21702 Released 2026-06-03 · Red Hat rating ImportantOpenShift Container Platform 4.20.24 bug fix and security update
- Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202605270908-0, rhcos-ppc64le-4.20.9.6.202605270908-0, rhcos-s390x-4.20.9.6.202605270908-0 +1
- RHSA-2026:21701 Released 2026-06-03 · Red Hat rating ModerateOpenShift Container Platform 4.20.24 packages and security update
- Red Hat OpenShift Container Platform 4.20 cri-o-1.33.12-3.rhaos4.20.git64c6a00.el9, kernel-5.14.0-570.117.1.el9_6, kernel-64k-5.14.0-570.117.1.el9_6 +47
- RHSA-2026:20593 Released 2026-05-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.172.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.172.1.el9_2, kernel-64k-devel-5.14.0-284.172.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.172.1.el9_2, kernel-5.14.0-284.172.1.el9_2, kernel-64k-5.14.0-284.172.1.el9_2 +29
- RHSA-2026:20299 Released 2026-05-21 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.75.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.75.1.el10_0, kernel-64k-devel-6.12.0-55.75.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.75.1.el10_0, kernel-64k-6.12.0-55.75.1.el10_0, kernel-64k-core-6.12.0-55.75.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.75.1.el10_0, libperf-6.12.0-55.75.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.75.1.el10_0, kernel-rt-64k-6.12.0-55.75.1.el10_0, kernel-rt-64k-core-6.12.0-55.75.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.75.1.el10_0, kernel-rt-core-6.12.0-55.75.1.el10_0, kernel-rt-debug-6.12.0-55.75.1.el10_0 +11
- RHSA-2026:20129 Released 2026-05-21 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.116.1.el9_6, libperf-5.14.0-570.116.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.116.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.116.1.el9_6, kernel-64k-devel-5.14.0-570.116.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.116.1.el9_6, kernel-64k-5.14.0-570.116.1.el9_6, kernel-64k-core-5.14.0-570.116.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.116.1.el9_6, kernel-rt-64k-5.14.0-570.116.1.el9_6, kernel-rt-64k-core-5.14.0-570.116.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.116.1.el9_6, kernel-rt-core-5.14.0-570.116.1.el9_6, kernel-rt-debug-5.14.0-570.116.1.el9_6 +11
- RHSA-2026:20054 Released 2026-05-21 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.126.1.el9_4, libperf-5.14.0-427.126.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.126.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.126.1.el9_4, kernel-64k-devel-5.14.0-427.126.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.126.1.el9_4, kernel-5.14.0-427.126.1.el9_4, kernel-64k-5.14.0-427.126.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.126.1.el9_4, kernel-rt-core-5.14.0-427.126.1.el9_4, kernel-rt-debug-5.14.0-427.126.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.126.1.el9_4, kernel-rt-core-5.14.0-427.126.1.el9_4, kernel-rt-debug-5.14.0-427.126.1.el9_4 +11
- RHSA-2026:20130 Released 2026-05-21 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.192.1.el8_4, kernel-4.18.0-305.192.1.el8_4, kernel-abi-stablelists-4.18.0-305.192.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.192.1.el8_4, kernel-4.18.0-305.192.1.el8_4, kernel-abi-stablelists-4.18.0-305.192.1.el8_4 +14
- RHSA-2026:20051 Released 2026-05-21 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.193.1.el8_6, kernel-4.18.0-372.193.1.el8_6, kernel-abi-stablelists-4.18.0-372.193.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.193.1.el8_6, kernel-4.18.0-372.193.1.el8_6, kernel-abi-stablelists-4.18.0-372.193.1.el8_6 +19
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.193.1.el8_6, kernel-4.18.0-372.193.1.el8_6, kernel-abi-stablelists-4.18.0-372.193.1.el8_6 +14
- RHSA-2026:19875 Released 2026-05-20 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.172.1.rt14.457.el9_2, kernel-rt-core-5.14.0-284.172.1.rt14.457.el9_2, kernel-rt-debug-5.14.0-284.172.1.rt14.457.el9_2 +9
- Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.172.1.rt14.457.el9_2, kernel-rt-core-5.14.0-284.172.1.rt14.457.el9_2, kernel-rt-debug-5.14.0-284.172.1.rt14.457.el9_2 +11
- RHSA-2026:19711 Released 2026-05-20 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.180.1.rt21.252.el9_0, kernel-rt-core-5.14.0-70.180.1.rt21.252.el9_0, kernel-rt-debug-5.14.0-70.180.1.rt21.252.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.180.1.rt21.252.el9_0, kernel-rt-core-5.14.0-70.180.1.rt21.252.el9_0, kernel-rt-debug-5.14.0-70.180.1.rt21.252.el9_0 +7
- RHSA-2026:19705 Released 2026-05-20 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.180.1.el9_0, kernel-debug-devel-matched-5.14.0-70.180.1.el9_0, kernel-devel-5.14.0-70.180.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.180.1.el9_0, kernel-5.14.0-70.180.1.el9_0, kernel-abi-stablelists-5.14.0-70.180.1.el9_0 +14
- RHSA-2026:19568 Released 2026-05-20 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.10.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.10.1.el9_8, kernel-64k-devel-5.14.0-687.10.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.10.1.el9_8, kernel-64k-5.14.0-687.10.1.el9_8, kernel-64k-core-5.14.0-687.10.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.10.1.el9_8, libperf-5.14.0-687.10.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.10.1.el9_8, kernel-rt-64k-5.14.0-687.10.1.el9_8, kernel-rt-64k-core-5.14.0-687.10.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.10.1.el9_8, kernel-rt-core-5.14.0-687.10.1.el9_8, kernel-rt-debug-5.14.0-687.10.1.el9_8 +9
- RHSA-2026:19666 Released 2026-05-20 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.125.1.el8_10, kernel-4.18.0-553.125.1.el8_10, kernel-abi-stablelists-4.18.0-553.125.1.el8_10 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.125.1.el8_10
- RHSA-2026:19664 Released 2026-05-20 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.125.1.rt7.466.el8_10, kernel-rt-core-4.18.0-553.125.1.rt7.466.el8_10, kernel-rt-debug-4.18.0-553.125.1.rt7.466.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.125.1.rt7.466.el8_10, kernel-rt-core-4.18.0-553.125.1.rt7.466.el8_10, kernel-rt-debug-4.18.0-553.125.1.rt7.466.el8_10 +7
- RHSA-2026:19569 Released 2026-05-20 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.16.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.16.1.el10_2, kernel-64k-devel-6.12.0-211.16.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.16.1.el10_2, kernel-64k-6.12.0-211.16.1.el10_2, kernel-64k-core-6.12.0-211.16.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.16.1.el10_2, libperf-6.12.0-211.16.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.16.1.el10_2, kernel-rt-64k-6.12.0-211.16.1.el10_2, kernel-rt-64k-core-6.12.0-211.16.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.16.1.el10_2, kernel-rt-core-6.12.0-211.16.1.el10_2, kernel-rt-debug-6.12.0-211.16.1.el10_2 +9
- RHSA-2026:19540 Released 2026-05-20 · Red Hat rating Importantkernel security update
- NVIDIA for RHEL 10 kernel-6.12.0-211.8.el10nv, kernel-64k-6.12.0-211.8.el10nv, kernel-64k-core-6.12.0-211.8.el10nv +32
- RHSA-2026:19521 Released 2026-05-20 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.143.1.el8_8, kernel-4.18.0-477.143.1.el8_8, kernel-abi-stablelists-4.18.0-477.143.1.el8_8 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.143.1.el8_8, kernel-4.18.0-477.143.1.el8_8, kernel-abi-stablelists-4.18.0-477.143.1.el8_8 +14
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| NVIDIA for RHEL 10 | Fixed | RHSA-2026:19540, RHSA-2026:33486 |
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2026:20054 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:20129 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:19569 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:19568 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2026:19705 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:20593 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:20299 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:20054 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:20129 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:19569 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:19666, RHSA-2026:23470 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:19568 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:20130 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:20051 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.6) | Fixed | RHSA-2026:20051 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:19521, RHSA-2026:23471 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2026:19705 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:20593, RHSA-2026:23469 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:24814 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:20299 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2026:20054 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:20129, RHSA-2026:23468 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:20130 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.6) | Fixed | RHSA-2026:20051 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:19521 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:19666 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:19569 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:19568 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:20299 |
| Red Hat Enterprise Linux NFV (v. 8) | Fixed | RHSA-2026:19664 |
| Red Hat Enterprise Linux NFV E4S (v.9.0) | Fixed | RHSA-2026:19711 |
| Red Hat Enterprise Linux RT (v. 8) | Fixed | RHSA-2026:19664 |
| Red Hat Enterprise Linux Real Time (v. 10) | Fixed | RHSA-2026:19569 |
| Red Hat Enterprise Linux Real Time (v. 9) | Fixed | RHSA-2026:19568 |
| Red Hat Enterprise Linux Real Time E4S (v.9.0) | Fixed | RHSA-2026:19711 |
| Red Hat Enterprise Linux Real Time E4S (v.9.2) | Fixed | RHSA-2026:19875 |
| Red Hat Enterprise Linux Real Time EUS (v. 10.0) | Fixed | RHSA-2026:20299 |
| Red Hat Enterprise Linux Real Time EUS (v.9.4) | Fixed | RHSA-2026:20054 |
| Red Hat Enterprise Linux Real Time EUS (v.9.6) | Fixed | RHSA-2026:20129 |
| Red Hat Enterprise Linux Real Time for NFV (v. 10) | Fixed | RHSA-2026:19569 |
| Red Hat Enterprise Linux Real Time for NFV (v. 9) | Fixed | RHSA-2026:19568 |
| Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) | Fixed | RHSA-2026:19875 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) | Fixed | RHSA-2026:20299 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) | Fixed | RHSA-2026:20054 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) | Fixed | RHSA-2026:20129 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:21701, RHSA-2026:21702 |
Not affected: 2 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Timeline
- 2026-10-02 Threatist record created from CVE-2026-46333
- 2026-10-03 Alias added: GHSA-pm8f-4p6p-6x53
- 2026-10-21 EPSS moved to the 50th–90th percentile
- 2026-10-25 EPSS moved to the 90th–95th percentile
References
Patch 8
- https://git.kernel.org/stable/c/93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6
- https://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205
- https://git.kernel.org/stable/c/4709234fd1b95136ceb789f639b1e7ea5de1b181
- https://git.kernel.org/stable/c/8f907d345bae8f4b3f004c5abc56bf2dfb851ea7
- https://git.kernel.org/stable/c/6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d
- https://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d
- https://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730
- https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a
Advisory 27
- https://lists.debian.org/debian-lts-announce/2026/05/msg00032.html
- https://lists.debian.org/debian-lts-announce/2026/05/msg00035.html
- https://access.redhat.com/errata/RHSA-2026:19521
- https://access.redhat.com/errata/RHSA-2026:19540
- https://access.redhat.com/errata/RHSA-2026:19568
- https://access.redhat.com/errata/RHSA-2026:19569
- https://access.redhat.com/errata/RHSA-2026:19664
- https://access.redhat.com/errata/RHSA-2026:19666
- https://access.redhat.com/errata/RHSA-2026:19705
- https://access.redhat.com/errata/RHSA-2026:19711
- https://access.redhat.com/errata/RHSA-2026:19875
- https://access.redhat.com/errata/RHSA-2026:20051
- https://access.redhat.com/errata/RHSA-2026:20054
- https://access.redhat.com/errata/RHSA-2026:20129
- https://access.redhat.com/errata/RHSA-2026:20130
- https://access.redhat.com/errata/RHSA-2026:20299
- https://access.redhat.com/errata/RHSA-2026:20593
- https://access.redhat.com/errata/RHSA-2026:21701
- https://access.redhat.com/errata/RHSA-2026:21702
- https://access.redhat.com/errata/RHSA-2026:23468
- https://access.redhat.com/errata/RHSA-2026:23469
- https://access.redhat.com/errata/RHSA-2026:23470
- https://access.redhat.com/errata/RHSA-2026:23471
- https://access.redhat.com/errata/RHSA-2026:24814
- https://access.redhat.com/security/cve/CVE-2026-46333
- https://bugzilla.redhat.com/show_bug.cgi?id=2477802
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46333.json
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2026-46333 · CVE Program
- CVE-2026-46333 · NVD
- FIRST EPSS
- GHSA-pm8f-4p6p-6x53 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-46333 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences