CVE-2026-46188

MEDIUM EPSS 2.8%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: octeon_ep_vf: add NULL check for napi_build_skb() napi_build_skb() can return NULL on allocation failure. In __octep_vf_oq_process_rx(), the result is used directly without a NULL check in both the single-buffer and multi-fragment paths, leading to a NULL pointer dereference. Add NULL checks after both napi_build_skb() calls, properly advancing descriptors and consuming remaining fragments on failure.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥6.9  –  <6.12.88
linuxlinux_kernel*≥6.13  –  <6.18.30
linuxlinux_kernel*≥6.19  –  <7.0.7

References 4

  • git.kernel.org https://git.kernel.org/stable/c/60246cdd4c515ea7d920cddf48932efcb990773e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6fef6640bbf360e254cc0174365ed30ce3a07572
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0f4711b426a06fb4c4be85c36b9f5588d5140d3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/dd66b42854705e4e4ee7f14d260f86c578bed3e3
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/60246cdd4c515ea7d920cddf48932efcb990773e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6fef6640bbf360e254cc0174365ed30ce3a07572
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0f4711b426a06fb4c4be85c36b9f5588d5140d3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/dd66b42854705e4e4ee7f14d260f86c578bed3e3
    Patch