7.1

CVE-2026-46078: linux Out-of-bounds Read

CVSS: 7.1v3.1HighUndergoing analysis
AliasesUBUNTU-CVE-2026-46078DEBIAN-CVE-2026-46078
Published 27-05-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-46078 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.4% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v3.1 (CVE.org)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 34 · Related 34
OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22742-1SUSE-SU-2026:22769-1SUSE-SU-2026:22812-1SUSE-SU-2026:22835-1

Timeline

  1. 27-05-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds nameoff handling for trailing dirents Currently we already have boundary-checks for nameoffs, but the trailing dirents are special since the namelens are calculated with strnlen() with unchecked nameoffs. If a crafted EROFS has a trailing dirent with nameoff >= maxsize, maxsize - nameoff can underflow, causing strnlen() to read past the directory block. nameoff0 should also be verified to be a multiple of `sizeof(struct erofs_dirent)` as well [1]. [1] https://sashiko.dev/#/patchset/20260416063511.3173774-1-hsiangkao%40linux.alibaba.com

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu155 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-136.136 | < 7.0.0-27.27
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1061.64 | < 7.0.0-1008.8
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < a8ee527807f7d97e55ce2ef2906f7f34975eb1c7 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < aa16dca1b062355181ef215229eeac249d7c0d61 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < 80a23c6d1aba35be8746d74ac14e6ba5ae46da21 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < 222055e6b4063abd2d9e13c3d49bbd1724c50789 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < 48b27a955d22391c7f30169fa7b6b2e1977f1ce4 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < 8ebb951a284b7446e025afc7dc5e9516ef9a7214 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < 1d55445226c75ddd4e78b09b3e7d99109b28c366 | ≥ 3aa8ec716e52c02360457fa018296629b4d0becf, < d18a3b5d337fa412a38e776e6b4b857a58836575 | 4.19
  • linux_kernel≥ 4.19, < 5.10.259 | ≥ 5.11, < 5.15.210 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.140 | ≥ 6.7, < 6.12.86 | ≥ 6.13, < 6.18.27 | ≥ 6.19, < 7.0.4
Debian1 product
  • linux< 6.1.176-1 | < 6.12.86-1 | < 7.0.4-1

3 vendors · 158 products

References

39 links
Show all 39 references