[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-46135":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":14,"duplicates":51,"related":52,"reserved_at":9,"published_at":54,"modified_at":55,"state":56,"summary":57,"references_raw":66,"kevs":88,"epss":89,"epss_history":92,"metrics":213,"affected":220},"CVE-2026-46135","In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: fix race between ICReq handling and queue teardown\n\nnvmet_tcp_handle_icreq() updates queue->state after sending an\nInitialization Connection Response (ICResp), but it does so without\nserializing against target-side queue teardown.\n\nIf an NVMe/TCP host sends an Initialization Connection Request\n(ICReq) and immediately closes the connection, target-side teardown\nmay start in softirq context before io_work drains the already\nbuffered ICReq. In that case, nvmet_tcp_schedule_release_queue()\nsets queue->state to NVMET_TCP_Q_DISCONNECTING and drops the queue\nreference under state_lock.\n\nIf io_work later processes that ICReq, nvmet_tcp_handle_icreq() can\nstill overwrite the state back to NVMET_TCP_Q_LIVE. That defeats the\nDISCONNECTING-state guard in nvmet_tcp_schedule_release_queue() and\nallows a later socket state change to re-enter teardown and issue a\nsecond kref_put() on an already released queue.\n\nThe ICResp send failure path has the same problem. If teardown has\nalready moved the queue to DISCONNECTING, a send error can still\noverwrite the state with NVMET_TCP_Q_FAILED, again reopening the\nwindow for a second teardown path to drop the queue reference.\n\nFix this by serializing both post-send state transitions with\nstate_lock and bailing out if teardown has already started.\n\nUse -ESHUTDOWN as an internal sentinel for that bail-out path rather\nthan propagating it as a transport error like -ECONNRESET. Keep\nnvmet_tcp_socket_error() setting rcv_state to NVMET_TCP_RECV_ERR before\nhonoring that sentinel so receive-side parsing stays quiesced until the\nexisting release path completes.",null,[],[],[],[],[15,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49],{"_key":16},"OPENSUSE-SU-2026:10954-1",{"_key":18},"DEBIAN-CVE-2026-46135",{"_key":20},"USN-8490-2",{"_key":22},"USN-8492-4",{"_key":24},"RHSA-2026:27353",{"_key":26},"RHSA-2026:27354",{"_key":28},"RHSA-2026:27789",{"_key":30},"RHSA-2026:30129",{"_key":32},"RHSA-2026:35904",{"_key":34},"RHSA-2026:36073",{"_key":36},"RHSA-2026:38902",{"_key":38},"RHSA-2026:39371",{"_key":40},"RHSA-2026:40068",{"_key":42},"UBUNTU-CVE-2026-46135",{"_key":44},"USN-8492-5",{"_key":46},"USN-8527-1",{"_key":48},"USN-8528-1",{"_key":50},"USN-8569-1",[],[53],{"_key":16},"2026-05-28T09:35:49.828Z","2026-07-04T11:50:41.012Z","Awaiting Analysis",{"cisa_kev":58,"cisa_ransomware":58,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":56},false,"low",0.00353,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[67,72,76,80,84],{"url":68,"sources":69,"tags":71},"https://git.kernel.org/stable/c/49891c8fe0cb43fbbe480da1cdccfbbaeb820cb3",[64,70],"nvd",[],{"url":73,"sources":74,"tags":75},"https://git.kernel.org/stable/c/67e1aaf93b495c2f10bc8a5fbba575fbb7f449b6",[64,70],[],{"url":77,"sources":78,"tags":79},"https://git.kernel.org/stable/c/dcfe4d1f7960e7d1c01642318f3aae1a604f8508",[64,70],[],{"url":81,"sources":82,"tags":83},"https://git.kernel.org/stable/c/5293a8882c549fab4a878bc76b0b6c951f980a61",[64,70],[],{"url":85,"sources":86,"tags":87},"https://git.kernel.org/stable/c/5f0b95ef68ab9afba75b20eebf436130f80c161a",[64],[],[],{"date":90,"score":60,"percentile":91},"2026-07-05",0.27346,[93,97,100,104,107,110,113,117,120,123,126,129,132,135,138,141,144,147,150,154,157,160,163,166,169,172,175,179,182,185,188,191,194,197,200,203,206,209,212],{"date":94,"score":95,"percentile":96},"2026-05-28",0.0002,0.06033,{"date":98,"score":95,"percentile":99},"2026-05-29",0.06047,{"date":101,"score":102,"percentile":103},"2026-05-30",0.00056,0.1791,{"date":105,"score":102,"percentile":106},"2026-05-31",0.179,{"date":108,"score":102,"percentile":109},"2026-06-01",0.17882,{"date":111,"score":102,"percentile":112},"2026-06-02",0.17886,{"date":114,"score":115,"percentile":116},"2026-06-03",0.00074,0.22518,{"date":118,"score":115,"percentile":119},"2026-06-04",0.22521,{"date":121,"score":115,"percentile":122},"2026-06-05",0.22605,{"date":124,"score":115,"percentile":125},"2026-06-06",0.22592,{"date":127,"score":115,"percentile":128},"2026-06-07",0.22543,{"date":130,"score":115,"percentile":131},"2026-06-08",0.22495,{"date":133,"score":115,"percentile":134},"2026-06-09",0.225,{"date":136,"score":115,"percentile":137},"2026-06-10",0.22525,{"date":139,"score":115,"percentile":140},"2026-06-11",0.2254,{"date":142,"score":115,"percentile":143},"2026-06-12",0.22735,{"date":145,"score":115,"percentile":146},"2026-06-13",0.22748,{"date":148,"score":115,"percentile":149},"2026-06-14",0.22729,{"date":151,"score":152,"percentile":153},"2026-06-15",0.00463,0.36379,{"date":155,"score":152,"percentile":156},"2026-06-16",0.36436,{"date":158,"score":152,"percentile":159},"2026-06-17",0.3648,{"date":161,"score":152,"percentile":162},"2026-06-18",0.3655,{"date":164,"score":152,"percentile":165},"2026-06-19",0.36534,{"date":167,"score":152,"percentile":168},"2026-06-20",0.36524,{"date":170,"score":152,"percentile":171},"2026-06-21",0.36507,{"date":173,"score":152,"percentile":174},"2026-06-22",0.36497,{"date":176,"score":177,"percentile":178},"2026-06-23",0.00457,0.36223,{"date":180,"score":177,"percentile":181},"2026-06-24",0.36257,{"date":183,"score":60,"percentile":184},"2026-06-25",0.27175,{"date":186,"score":60,"percentile":187},"2026-06-26",0.27211,{"date":189,"score":60,"percentile":190},"2026-06-27",0.27247,{"date":192,"score":60,"percentile":193},"2026-06-28",0.27216,{"date":195,"score":60,"percentile":196},"2026-06-29",0.2721,{"date":198,"score":60,"percentile":199},"2026-06-30",0.27183,{"date":201,"score":60,"percentile":202},"2026-07-01",0.27289,{"date":204,"score":60,"percentile":205},"2026-07-02",0.2731,{"date":207,"score":60,"percentile":208},"2026-07-03",0.27319,{"date":210,"score":60,"percentile":211},"2026-07-04",0.27334,{"date":90,"score":60,"percentile":91},[214,218],{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":215,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":216,"vectorString":65,"impactScore":62,"exploitabilityScore":217},"CRITICAL",10,{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":219,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":216,"vectorString":65,"impactScore":62,"exploitabilityScore":217},[221],{"ecosystem":9,"name":222,"vendor":223,"product":223,"cpe_part":224,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":225},"Linux","linux","a",[226,233,236,239,242,245,248,251,255,257,259,261,263],{"version":227,"is_range":228,"range_type":64,"version_start":229,"version_start_type":230,"version_end":231,"version_end_type":232,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 49891c8fe0cb43fbbe480da1cdccfbbaeb820cb3",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","49891c8fe0cb43fbbe480da1cdccfbbaeb820cb3","excluding",{"version":234,"is_range":228,"range_type":64,"version_start":229,"version_start_type":230,"version_end":235,"version_end_type":232,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 67e1aaf93b495c2f10bc8a5fbba575fbb7f449b6","67e1aaf93b495c2f10bc8a5fbba575fbb7f449b6",{"version":237,"is_range":228,"range_type":64,"version_start":229,"version_start_type":230,"version_end":238,"version_end_type":232,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C dcfe4d1f7960e7d1c01642318f3aae1a604f8508","dcfe4d1f7960e7d1c01642318f3aae1a604f8508",{"version":240,"is_range":228,"range_type":64,"version_start":229,"version_start_type":230,"version_end":241,"version_end_type":232,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 5293a8882c549fab4a878bc76b0b6c951f980a61","5293a8882c549fab4a878bc76b0b6c951f980a61",{"version":243,"is_range":228,"range_type":64,"version_start":9,"version_start_type":9,"version_end":244,"version_end_type":232,"fixed_in":9},"\u003C 6.12.88","6.12.88",{"version":246,"is_range":228,"range_type":64,"version_start":9,"version_start_type":9,"version_end":247,"version_end_type":232,"fixed_in":9},"\u003C 6.18.30","6.18.30",{"version":249,"is_range":228,"range_type":64,"version_start":9,"version_start_type":9,"version_end":250,"version_end_type":232,"fixed_in":9},"\u003C 7.0.7","7.0.7",{"version":252,"is_range":228,"range_type":64,"version_start":253,"version_start_type":230,"version_end":254,"version_end_type":232,"fixed_in":9},">= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, \u003C 5f0b95ef68ab9afba75b20eebf436130f80c161a","872d26a391da92ed8f0c0f5cb5fef428067b7f30","5f0b95ef68ab9afba75b20eebf436130f80c161a",{"version":256,"is_range":228,"range_type":64,"version_start":253,"version_start_type":230,"version_end":231,"version_end_type":232,"fixed_in":9},">= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, \u003C 49891c8fe0cb43fbbe480da1cdccfbbaeb820cb3",{"version":258,"is_range":228,"range_type":64,"version_start":253,"version_start_type":230,"version_end":235,"version_end_type":232,"fixed_in":9},">= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, \u003C 67e1aaf93b495c2f10bc8a5fbba575fbb7f449b6",{"version":260,"is_range":228,"range_type":64,"version_start":253,"version_start_type":230,"version_end":238,"version_end_type":232,"fixed_in":9},">= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, \u003C dcfe4d1f7960e7d1c01642318f3aae1a604f8508",{"version":262,"is_range":228,"range_type":64,"version_start":253,"version_start_type":230,"version_end":241,"version_end_type":232,"fixed_in":9},">= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, \u003C 5293a8882c549fab4a878bc76b0b6c951f980a61",{"version":264,"is_range":58,"range_type":64,"version_start":264,"version_start_type":230,"version_end":264,"version_end_type":230,"fixed_in":9},"5.0"]