CVE-2026-46199: linux Out-of-bounds Read
CVSS: 7.1v3.1HighModified
AliasesUBUNTU-CVE-2026-46199DEBIAN-CVE-2026-46199
Published 28-05-2026Last modified 19-10-2026
Vulnerability summary
CVE-2026-46199 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.4% of scored vulnerabilities.
CVSS score
7.1/10
010
High · v3.1 (CVE.org)EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 42 · Related 38OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21555-1RHSA-2026:71602RHSA-2026:71700RHSA-2026:72467RHSA-2026:72468SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1SUSE-SU-2026:23231-1SUSE-SU-2026:23237-1SUSE-SU-2026:23241-1SUSE-SU-2026:23244-1SUSE-SU-2026:3130-1SUSE-SU-2026:3166-1USN-8566-1USN-8567-1USN-8568-1USN-8569-1USN-8574-1USN-8574-2USN-8574-3USN-8593-1USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8603-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8618-1USN-8619-1USN-8663-1USN-8664-1USN-8665-1USN-8728-1USN-8728-2USN-8728-3
Timeline
- 28-05-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg.
CVSS metrics
5 scores · 4 sources · 2 versionsMedium 6.9Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:NSourcesSingle source
High 7.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- NVDNIST7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.13%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.13% on 20-09-2026
20-09-202620-10-2026
EPSS score0.13%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu154 products
- linuxAll versions (No fix recorded) | < 6.8.0-136.136 | < 7.0.0-28.28
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 6.8.0-1061.64 | < 7.0.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 87cc7f9ebf7ce10f82250002d667ef3e93a79d44, < 88411caee8f576d6b5abf6531232fcc0ce756dc5 | ≥ 87cc7f9ebf7ce10f82250002d667ef3e93a79d44, < c72a8b4dc6d598e3831ef3abd9c6527dfbf4810e | ≥ 87cc7f9ebf7ce10f82250002d667ef3e93a79d44, < 7688143ca62edeecacb3ba0a2cea129dbd262a18 | ≥ 87cc7f9ebf7ce10f82250002d667ef3e93a79d44, < 63b51e8a9d54317d31cc3856c1e12407070d5fc2 | ≥ 87cc7f9ebf7ce10f82250002d667ef3e93a79d44, < 3c817a60b09eaab926e475088e750936efcc95ae | ≥ 87cc7f9ebf7ce10f82250002d667ef3e93a79d44, < 0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648 | 5.13
- linux_kernel≥ 5.13, < 6.1.175 | ≥ 6.2, < 6.6.140 | ≥ 6.7, < 6.12.90 | ≥ 6.13, < 6.18.32 | ≥ 6.19, < 7.0.9
Debian1 product
- linux< 6.1.176-1 | < 6.12.90-1 | < 7.0.9-1
3 vendors · 157 products
