CVE-2026-46000None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets The security operations that verify the RESPONSE packets decrypt bits of it in place - however, the s…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Last analysed / modified upstream
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
The security operations that verify the RESPONSE packets decrypt bits of it in place - however, the sk_buff may be shared with a packet sniffer, which would lead to the sniffer seeing an apparently corrupt packet (actually decrypted).
Fix this by handing a copy of the packet off to the specific security handler if the packet was cloned.
Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < ae19f6a54206534a85830dd92985f5f41441d241Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < c0428a22daf69714dc042b67ea759956b74c74e5Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 98a2046d155f73f6cf5d2c493c5e09b4963e2e12Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < ca71ac2de389b01eecdc48bfafbdf073ec232044Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < d9b93a0f57ca5f6831bfaa34014b6cd705564a00Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 24481a7f573305706054c59e275371f8d0fe919fLinux 2.6.22Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses