GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46065 (GCVE-0-2026-46065)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:57 – Updated: 2026-08-05 12:29
VLAI
Title
fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
Summary
In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Hold state of deferred I/O in struct fb_deferred_io_state. Allocate an instance as part of initializing deferred I/O and remove it only after the final mapping has been closed. If the fb_info and the contained deferred I/O meanwhile goes away, clear struct fb_deferred_io_state.info to invalidate the mapping. Any access will then result in a SIGBUS signal. Fixes a long-standing problem, where a device hot-unplug happens while user space still has an active mapping of the graphics memory. The hot- unplug frees the instance of struct fb_info. Accessing the memory will operate on undefined state.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < 4aab89603b637a2e441b38808c4f6fe7d1184df6 (git)
Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < 4fda0d6b45faad44926dd3e4f55f118d899b2e27 (git)
Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < 2a40f8bc9bb713329f1c35ffc199ee961a7135b0 (git)
Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < 2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066 (git)
Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < 25c2b77bc463f29ee71a54b883548baf9386a0db (git)
Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < a0aafb421dd15e935d81543152617f2742cefa70 (git)
Affected: 60b59beafba875aef6d378078bce0baf2287ae14 , < 9ded47ad003f09a94b6a710b5c47f4aa5ceb7429 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.22
Unaffected: 0 , < 2.6.22 (semver)
Unaffected: 5.15.210 , ≤ 5.15.* (semver)
Unaffected: 6.1.176 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.88 , ≤ 6.12.* (semver)
Unaffected: 6.18.30 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/video/fbdev/core/fb_defio.c",
            "include/linux/fb.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4aab89603b637a2e441b38808c4f6fe7d1184df6",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            },
            {
              "lessThan": "4fda0d6b45faad44926dd3e4f55f118d899b2e27",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            },
            {
              "lessThan": "2a40f8bc9bb713329f1c35ffc199ee961a7135b0",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            },
            {
              "lessThan": "2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            },
            {
              "lessThan": "25c2b77bc463f29ee71a54b883548baf9386a0db",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            },
            {
              "lessThan": "a0aafb421dd15e935d81543152617f2742cefa70",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            },
            {
              "lessThan": "9ded47ad003f09a94b6a710b5c47f4aa5ceb7429",
              "status": "affected",
              "version": "60b59beafba875aef6d378078bce0baf2287ae14",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/video/fbdev/core/fb_defio.c",
            "include/linux/fb.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.22"
            },
            {
              "lessThan": "2.6.22",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.88",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.88",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.30",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.22",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info\n\nHold state of deferred I/O in struct fb_deferred_io_state. Allocate an\ninstance as part of initializing deferred I/O and remove it only after\nthe final mapping has been closed. If the fb_info and the contained\ndeferred I/O meanwhile goes away, clear struct fb_deferred_io_state.info\nto invalidate the mapping. Any access will then result in a SIGBUS\nsignal.\n\nFixes a long-standing problem, where a device hot-unplug happens while\nuser space still has an active mapping of the graphics memory. The hot-\nunplug frees the instance of struct fb_info. Accessing the memory will\noperate on undefined state."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable fault handlers are reached by mmap\u0027ing /dev/fbN and accessing the mapping \u2014 a local operation requiring no network. Device removal (the precondition) can be non-physical (VM host-driven removal, sysfs unbind, module unload), so Local is the most severe defensible vector over Physical.\nAC:L - Once the device is removed while a mapping is active, any access deterministically hits the freed defio state/video pages \u2014 no race must be won to trigger it. In a kiosk/embedded scenario with a removable display the attacker controls both the mapping and the removal, and heap reclaim is attacker-influenced.\nPR:L - Exploitation requires only a local user with access to the framebuffer device, which is granted to the logged-in/console user, video-group members, Android apps, and is often world-accessible on embedded/kiosk systems. No root or init-namespace privilege is needed.\nUI:N - The attacker performs all steps themselves \u2014 map the framebuffer, cause/await removal, then access the mapping \u2014 with no separate victim action required.\nS:U - The use-after-free corrupts kernel memory within the same security authority; even in the VM-framebuffer case the impact stays inside the guest kernel and does not cross into the hypervisor.\nC:H - The fault handler returns freed-and-reclaimed video pages and the freed pagerefs array to userspace, allowing disclosure of arbitrary reallocated kernel/user memory \u2014 a use-after-free read primitive.\nI:H - The write-fault path writes a page pointer and offset into the kvfree\u0027d pagerefs array and exposes freed/reallocated pages for writing, giving a use-after-free write primitive usable for control-flow hijacking via heap spraying.\nA:H - Accessing the mapping after teardown uses a destroyed mutex, freed pagerefs, and hits BUG_ON(!info-\u003efbdefio-\u003emapping), reliably causing an oops/panic; any use-after-free crashes the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:29:27.785Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4aab89603b637a2e441b38808c4f6fe7d1184df6"
        },
        {
          "url": "https://git.kernel.org/stable/c/4fda0d6b45faad44926dd3e4f55f118d899b2e27"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a40f8bc9bb713329f1c35ffc199ee961a7135b0"
        },
        {
          "url": "https://git.kernel.org/stable/c/2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066"
        },
        {
          "url": "https://git.kernel.org/stable/c/25c2b77bc463f29ee71a54b883548baf9386a0db"
        },
        {
          "url": "https://git.kernel.org/stable/c/a0aafb421dd15e935d81543152617f2742cefa70"
        },
        {
          "url": "https://git.kernel.org/stable/c/9ded47ad003f09a94b6a710b5c47f4aa5ceb7429"
        }
      ],
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46065",
    "datePublished": "2026-05-27T12:57:32.968Z",
    "dateReserved": "2026-05-13T15:03:33.095Z",
    "dateUpdated": "2026-08-05T12:29:27.785Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46065",
      "date": "2026-09-16",
      "epss": "0.00129",
      "percentile": "0.02937"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:44:31.000Z",
      "cve": "CVE-2026-46065",
      "id": "msrc_CVE-2026-46065",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46065.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46065\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-27T14:17:27.050\",\"lastModified\":\"2026-06-24T17:08:46.490\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nfbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info\\n\\nHold state of deferred I/O in struct fb_deferred_io_state. Allocate an\\ninstance as part of initializing deferred I/O and remove it only after\\nthe final mapping has been closed. If the fb_info and the contained\\ndeferred I/O meanwhile goes away, clear struct fb_deferred_io_state.info\\nto invalidate the mapping. Any access will then result in a SIGBUS\\nsignal.\\n\\nFixes a long-standing problem, where a device hot-unplug happens while\\nuser space still has an active mapping of the graphics memory. The hot-\\nunplug frees the instance of struct fb_info. Accessing the memory will\\noperate on undefined state.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/video/fbdev/core/fb_defio.c\",\"include/linux/fb.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"4aab89603b637a2e441b38808c4f6fe7d1184df6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"4fda0d6b45faad44926dd3e4f55f118d899b2e27\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"2a40f8bc9bb713329f1c35ffc199ee961a7135b0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"25c2b77bc463f29ee71a54b883548baf9386a0db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"a0aafb421dd15e935d81543152617f2742cefa70\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"60b59beafba875aef6d378078bce0baf2287ae14\",\"lessThan\":\"9ded47ad003f09a94b6a710b5c47f4aa5ceb7429\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/video/fbdev/core/fb_defio.c\",\"include/linux/fb.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.22\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.22\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.210\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.176\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.88\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.30\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.4\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.22\",\"versionEndExcluding\":\"5.15.210\",\"matchCriteriaId\":\"D0822DE2-87B7-4AAA-8C9C-619AB726A035\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.176\",\"matchCriteriaId\":\"C4446623-5F2B-4DD8-8666-9FAAC285A757\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"A1A92866-F406-43B5-B2D1-CFC274753E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.88\",\"matchCriteriaId\":\"5AFBE0EC-CCDF-4207-AE92-ABF958125CA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.30\",\"matchCriteriaId\":\"BF39AE08-AE6D-4410-8FBE-76F6BF5BF55B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.4\",\"matchCriteriaId\":\"CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/25c2b77bc463f29ee71a54b883548baf9386a0db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2a40f8bc9bb713329f1c35ffc199ee961a7135b0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2b53d3a52e8e5403a4f4fb57ac6cad3fd2cb1066\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4aab89603b637a2e441b38808c4f6fe7d1184df6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4fda0d6b45faad44926dd3e4f55f118d899b2e27\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9ded47ad003f09a94b6a710b5c47f4aa5ceb7429\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0aafb421dd15e935d81543152617f2742cefa70\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T19:16:31+00:00",
      "cve": "CVE-2026-46065",
      "id": "CVE-2026-46065",
      "initial_release_date": "2026-05-27T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46065.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:12:49Z",
      "cve": "CVE-2026-46065",
      "id": "CVE-2026-46065",
      "initial_release_date": "2026-05-28T03:53:22Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "643",
      "product_status:recommended": "291",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46065",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46065.json",
      "version": "18"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.