GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46053 (GCVE-0-2026-46053)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:57 – Updated: 2026-08-05 12:29
VLAI
Title
net: rds: fix MR cleanup on copy error
Summary
In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on copy error __rds_rdma_map() hands sg/pages ownership to the transport after get_mr() succeeds. If copying the generated cookie back to user space fails after that point, the error path must not free those resources again before dropping the MR reference. Remove the duplicate unpin/free from the put_user() failure branch so that MR teardown is handled only through the existing final cleanup path.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < 91a44b406bc1f9e1c5da0cb7d0d5991b43b79147 (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < 106dc689206610cfa2098f593fdd1e020c997835 (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < ec55a86f7fba7d9111df94b9c11a4755ed492995 (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < 8fdbb6262a4a3ed44a0830a7793903b54bb27bdc (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < d95cea9298be1ba8876e3f156be96d3a492085ca (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < 033370ffb3c9c0264d19f8ba9ef769523266589a (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < b3cb8cae530b2727d8245684148bb49425f6765c (git)
Affected: 0d4597c8c5abdeeaf50774066c16683f30184dc8 , < 8141a2dc70080eda1aedc0389ed2db2b292af5bd (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.6
Unaffected: 0 , < 5.6 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.86 , ≤ 6.12.* (semver)
Unaffected: 6.18.27 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/rds/rdma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "91a44b406bc1f9e1c5da0cb7d0d5991b43b79147",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "106dc689206610cfa2098f593fdd1e020c997835",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "ec55a86f7fba7d9111df94b9c11a4755ed492995",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "8fdbb6262a4a3ed44a0830a7793903b54bb27bdc",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "d95cea9298be1ba8876e3f156be96d3a492085ca",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "033370ffb3c9c0264d19f8ba9ef769523266589a",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "b3cb8cae530b2727d8245684148bb49425f6765c",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            },
            {
              "lessThan": "8141a2dc70080eda1aedc0389ed2db2b292af5bd",
              "status": "affected",
              "version": "0d4597c8c5abdeeaf50774066c16683f30184dc8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/rds/rdma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "lessThan": "5.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: rds: fix MR cleanup on copy error\n\n__rds_rdma_map() hands sg/pages ownership to the transport after\nget_mr() succeeds. If copying the generated cookie back to user space\nfails after that point, the error path must not free those resources\nagain before dropping the MR reference.\n\nRemove the duplicate unpin/free from the put_user() failure branch so\nthat MR teardown is handled only through the existing final cleanup\npath."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is triggered through the local `setsockopt(SOL_RDS, RDS_GET_MR/RDS_GET_MR_FOR_DEST)` syscall on an RDS socket (MR-registration control plane); it is not reachable from a remote peer\u0027s network packets.\nAC:L - Once an RDMA-capable RDS socket is bound, the double-free is 100% deterministic and the attacker fully controls the trigger by supplying a bad `cookie_addr` so `put_user()` faults; there is no race or attacker-uncontrolled condition.\nPR:L - Creating an AF_RDS socket has no capability check (module auto-loads) and `can_do_mlock()` passes for normal users by default, so any unprivileged local user on a host with RDMA hardware can reach the path.\nUI:N - The attacker triggers the entire sequence with its own syscalls; no action by another user or victim is required.\nS:U - The double-free corrupts the kernel slab/page allocator within the kernel\u0027s own security authority and does not cross a virtualization or IOMMU boundary.\nC:H - The double-free of the `sg` slab object and the page-refcount underflow yield use-after-free/cross-object primitives that can be groomed into arbitrary kernel-memory reads, enabling significant information disclosure.\nI:H - A double `kfree()` corrupts the SLUB freelist and the page-refcount underflow allows reuse of an in-use physical page, both classic primitives for arbitrary kernel write and privilege escalation.\nA:H - The double-free and page-refcount underflow readily cause heap corruption, freelist poisoning, and kernel panic/oops."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:29:21.209Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/91a44b406bc1f9e1c5da0cb7d0d5991b43b79147"
        },
        {
          "url": "https://git.kernel.org/stable/c/106dc689206610cfa2098f593fdd1e020c997835"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec55a86f7fba7d9111df94b9c11a4755ed492995"
        },
        {
          "url": "https://git.kernel.org/stable/c/8fdbb6262a4a3ed44a0830a7793903b54bb27bdc"
        },
        {
          "url": "https://git.kernel.org/stable/c/d95cea9298be1ba8876e3f156be96d3a492085ca"
        },
        {
          "url": "https://git.kernel.org/stable/c/033370ffb3c9c0264d19f8ba9ef769523266589a"
        },
        {
          "url": "https://git.kernel.org/stable/c/b3cb8cae530b2727d8245684148bb49425f6765c"
        },
        {
          "url": "https://git.kernel.org/stable/c/8141a2dc70080eda1aedc0389ed2db2b292af5bd"
        }
      ],
      "title": "net: rds: fix MR cleanup on copy error",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46053",
    "datePublished": "2026-05-27T12:57:11.870Z",
    "dateReserved": "2026-05-13T15:03:33.094Z",
    "dateUpdated": "2026-08-05T12:29:21.209Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46053",
      "date": "2026-09-15",
      "epss": "0.00129",
      "percentile": "0.02906"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:51:23.000Z",
      "cve": "CVE-2026-46053",
      "id": "msrc_CVE-2026-46053",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "net: rds: fix MR cleanup on copy error",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46053.json",
      "version": "4"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46053\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-27T14:17:24.937\",\"lastModified\":\"2026-06-17T10:52:59.187\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: rds: fix MR cleanup on copy error\\n\\n__rds_rdma_map() hands sg/pages ownership to the transport after\\nget_mr() succeeds. If copying the generated cookie back to user space\\nfails after that point, the error path must not free those resources\\nagain before dropping the MR reference.\\n\\nRemove the duplicate unpin/free from the put_user() failure branch so\\nthat MR teardown is handled only through the existing final cleanup\\npath.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/rds/rdma.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"91a44b406bc1f9e1c5da0cb7d0d5991b43b79147\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"106dc689206610cfa2098f593fdd1e020c997835\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"ec55a86f7fba7d9111df94b9c11a4755ed492995\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"8fdbb6262a4a3ed44a0830a7793903b54bb27bdc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"d95cea9298be1ba8876e3f156be96d3a492085ca\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"033370ffb3c9c0264d19f8ba9ef769523266589a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"b3cb8cae530b2727d8245684148bb49425f6765c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0d4597c8c5abdeeaf50774066c16683f30184dc8\",\"lessThan\":\"8141a2dc70080eda1aedc0389ed2db2b292af5bd\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/rds/rdma.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.86\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.27\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.4\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.6.1\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"8CECDB7D-8788-4E11-AE2E-F12105520BA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"A1A92866-F406-43B5-B2D1-CFC274753E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.86\",\"matchCriteriaId\":\"55DA1C62-9991-451E-B8A8-E0004E00F789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.27\",\"matchCriteriaId\":\"A10AC84F-C058-47D5-85B4-E6E51A613B74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.4\",\"matchCriteriaId\":\"CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A92F7A0E-C302-4FEA-9EF3-1A3D5CF3AD54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.6:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D3107F6-EB44-4C65-AA1B-1E96923F6409\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.6:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC0C894E-6323-44E5-89DD-8FB6A5C41CAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.6:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C76EAC9-C2E6-4B6F-B002-ADBE74DDD794\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.6:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"F13B8FBF-E007-4F60-A290-2833B45F8520\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.6:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD0276C4-2C60-4C52-AC89-F96DF991B858\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/033370ffb3c9c0264d19f8ba9ef769523266589a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/106dc689206610cfa2098f593fdd1e020c997835\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8141a2dc70080eda1aedc0389ed2db2b292af5bd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8fdbb6262a4a3ed44a0830a7793903b54bb27bdc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/91a44b406bc1f9e1c5da0cb7d0d5991b43b79147\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b3cb8cae530b2727d8245684148bb49425f6765c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d95cea9298be1ba8876e3f156be96d3a492085ca\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ec55a86f7fba7d9111df94b9c11a4755ed492995\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-05T14:51:19+00:00",
      "cve": "CVE-2026-46053",
      "id": "CVE-2026-46053",
      "initial_release_date": "2026-05-27T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: rds: fix MR cleanup on copy error",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46053.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:12:57Z",
      "cve": "CVE-2026-46053",
      "id": "CVE-2026-46053",
      "initial_release_date": "2026-05-28T03:53:36Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "528",
      "product_status:known_not_affected": "175",
      "product_status:recommended": "254",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46053",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46053.json",
      "version": "17"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.