CVE-2026-46108: linux
CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-46108DEBIAN-CVE-2026-46108
Published 28-05-2026Last modified 14-06-2026
Vulnerability summary
CVE-2026-46108 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.16%
0%100%
Low · +0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 52 · Related 52OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1SUSE-SU-2026:23231-1SUSE-SU-2026:23237-1SUSE-SU-2026:23241-1SUSE-SU-2026:23244-1SUSE-SU-2026:3130-1SUSE-SU-2026:3166-1SUSE-SU-2026:4282-1USN-8566-1USN-8567-1USN-8568-1USN-8569-1USN-8574-1USN-8574-2USN-8574-3USN-8575-1USN-8575-2USN-8575-3USN-8576-1USN-8576-2USN-8593-1USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8597-1USN-8603-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8610-1USN-8618-1USN-8619-1USN-8620-1USN-8620-2USN-8620-3USN-8620-4USN-8663-1USN-8664-1USN-8665-1USN-8668-1USN-8668-2USN-8728-1USN-8728-2USN-8728-3
Timeline
- 28-05-2026PublishedVulnerability first disclosed.
- 14-06-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There were places where nothing would get started if a message allocation failed, so the driver needs to return to normal state.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
+0.04 pp
From 0.12% on 19-09-2026
19-09-202619-10-2026
EPSS score0.16%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu166 products
- linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136 | < 7.0.0-28.28
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64 | < 7.0.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c204fab7f76a055eac346e3b1a75c6b4bb99600e | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ab48817aebe4d831f87d4da6f94f50498c130d9e | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 9c6ded95ac6281e390d167637ccbde6cea2ba1ae | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ce905b65e649eee378a0f37e8219f1d70efb3007 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 88881dc1da86064f479378bc9d0a4956c3d0bb12 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < bc13fce9eeec88c4950924754c3347c6dc66ff4c | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ba60140d4133231b49185ac8bf6e54f318d3134e | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 09dd798270ff582d7309f285d4aaf5dbebae01cb | 2.6.12
- linux_kernel≥ 2.6.12.1, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.140 | ≥ 6.7, < 6.12.88 | ≥ 6.13, < 6.18.30 | ≥ 6.19, < 7.0.7 | 2.6.12 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 7.1:rc1 | 7.1:rc2
Debian1 product
- linux< 6.1.176-1 | < 6.12.88-1 | < 7.0.7-1
3 vendors · 169 products