5.5

CVE-2026-46142: linux

CVSS: 5.5v3.1MediumUndergoing analysis
AliasesUBUNTU-CVE-2026-46142DEBIAN-CVE-2026-46142
Published 28-05-2026Last modified 14-06-2026
Open JSON

Vulnerability summary

CVE-2026-46142 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.9% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 26 · Related 26
OPENSUSE-SU-2026:10954-1USN-8566-1USN-8567-1USN-8568-1USN-8569-1USN-8574-1

Timeline

  1. 28-05-2026
    PublishedVulnerability first disclosed.
  2. 14-06-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the device is VF, the bus function ID can be obtained directly from the PCI_FUNC(pdev->devfn).

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

+0.03 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu136 products
  • linux< 6.8.0-136.136 | All versions (No fix recorded) | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1061.64 | All versions (No fix recorded) | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ d4187ec2641061748480cdc944fd07653fad50d5, < d3bd8040497968f6f5470018724ef7b0df92f707 | ≥ f0b3ecdbb5bbee8ca6b2892aba3988c8a3ce858e, < f6e656f7cea16b638675a2ab7d7e4cf2516c5eb0 | ≥ a04ea57aae375bdda1cb57034d8bcbb351e1f973, < 33c5bb50b9c40e8451e6aec4487a31d794b98d92 | ≥ a04ea57aae375bdda1cb57034d8bcbb351e1f973, < 68a007a701bc06fa426507c551ef12514f2e721d | ≥ a04ea57aae375bdda1cb57034d8bcbb351e1f973, < 694de316f607fe2473d52ca0707e3918e72c1562 | 93e52b75f11a8f39b22993ae315b5b9a6b2668a3 | ≥ 6.6.117, < 6.6.140 | ≥ 6.12.58, < 6.12.88 | ≥ 6.17.8, < 6.18 | 6.18
  • linux_kernel≥ 6.6.117, < 6.6.140 | ≥ 6.12.58, < 6.12.88 | ≥ 6.17.8, < 6.18 | ≥ 6.18.1, < 6.18.30 | ≥ 6.19, < 7.0.7 | 6.18 | 6.18:rc5 | 6.18:rc6 | 6.18:rc7 | 7.1:rc1 | 7.1:rc2
Debian1 product
  • linux< 6.12.88-1 | < 7.0.7-1

3 vendors · 139 products

References

35 links
Show all 35 references