[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-46244":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":30,"aliases":31,"duplicate_of":9,"upstream":32,"downstream":33,"duplicates":70,"related":71,"reserved_at":9,"published_at":79,"modified_at":80,"state":81,"summary":82,"references_raw":91,"kevs":151,"epss":152,"epss_history":155,"metrics":255,"affected":263},"CVE-2026-46244","In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_inner: Fix IPv6 inner_thoff desync\n\nIn nft_inner_parse_l2l3(), when processing inner IPv6 packets,\nipv6_find_hdr() correctly computes the transport header offset\ntraversing all extension headers, but the result is immediately\noverwritten with nhoff + sizeof(_ip6h) (40 bytes), which only\naccounts for the IPv6 base header. This creates a desync between\ninner_thoff (wrong — points to extension header start) and l4proto\n(correct — e.g., IPPROTO_TCP), enabling transport header forgery\nand potential firewall bypass. This issue affects stable versions\nfrom Linux 6.2.\n\nFor comparison, the normal (non-inner) IPv6 path correctly\npreserves ipv6_find_hdr()'s result. Removing the incorrect overwrite\nensures that ipv6_find_hdr()'s calculated transport header offset is\npreserved, thereby fixing the desynchronization.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":9,"capec":25},"CWE-823","Use of Out-of-range Pointer Offset","The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.","weakness","Incomplete","Base",[26],{"id":27,"name":28,"techniques":29},"CAPEC-129","Pointer Manipulation",[],[],[],[],[34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68],{"_key":35},"OPENSUSE-SU-2026:11014-1",{"_key":37},"DEBIAN-CVE-2026-46244",{"_key":39},"SUSE-SU-2026:22433-1",{"_key":41},"SUSE-SU-2026:22436-1",{"_key":43},"SUSE-SU-2026:22458-1",{"_key":45},"SUSE-SU-2026:22460-1",{"_key":47},"SUSE-SU-2026:2722-1",{"_key":49},"SUSE-SU-2026:2799-1",{"_key":51},"USN-8490-2",{"_key":53},"USN-8492-4",{"_key":55},"RHSA-2026:33215",{"_key":57},"RHSA-2026:34094",{"_key":59},"RHSA-2026:34443",{"_key":61},"RHSA-2026:34911",{"_key":63},"RHSA-2026:36018",{"_key":65},"UBUNTU-CVE-2026-46244",{"_key":67},"USN-8492-5",{"_key":69},"USN-8569-1",[],[72,73,74,75,76,77,78],{"_key":35},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},"2026-06-03T15:48:59.049Z","2026-07-15T00:50:59.553Z","Analyzed",{"cisa_kev":83,"cisa_ransomware":83,"cisa_vendor":9,"epss_severity":84,"epss_score":85,"severity":86,"severity_score":87,"severity_version":88,"severity_source":89,"severity_vector":90,"severity_status":81},false,"low",0.0031,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",[92,98,102,106,110,114,120,125,130,135,139,143,147],{"url":93,"sources":94,"tags":96},"https://git.kernel.org/stable/c/c161ad9157f5a0429b5ff94d9770faf3bf48d273",[89,95],"nvd",[97],"Patch",{"url":99,"sources":100,"tags":101},"https://git.kernel.org/stable/c/870d59e2cf218e7418491e26bad768cb16654582",[89,95],[97],{"url":103,"sources":104,"tags":105},"https://git.kernel.org/stable/c/689bbf48c1f45130086ae1c46ab83ea4c753c601",[89,95],[97],{"url":107,"sources":108,"tags":109},"https://git.kernel.org/stable/c/d0f98a3617f6ae5b1e95cde1e68e7ead4a1279ce",[89,95],[97],{"url":111,"sources":112,"tags":113},"https://git.kernel.org/stable/c/b6a91f68ebfed9c38e0e9150f58a9b85da07181c",[89,95],[97],{"url":115,"sources":116,"tags":117},"https://access.redhat.com/security/cve/CVE-2026-46244",[89],[118,119],"VDB Entry","X Refsource REDHAT",{"url":121,"sources":122,"tags":123},"https://bugzilla.redhat.com/show_bug.cgi?id=2484451",[89],[124,119],"Issue Tracking",{"url":126,"sources":127,"tags":128},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46244.json",[89],[129],"X Sadp Csaf Vex",{"url":131,"sources":132,"tags":133},"https://access.redhat.com/errata/RHSA-2026:33215",[89],[134,119],"Vendor Advisory",{"url":136,"sources":137,"tags":138},"https://access.redhat.com/errata/RHSA-2026:34911",[89],[134,119],{"url":140,"sources":141,"tags":142},"https://access.redhat.com/errata/RHSA-2026:34443",[89],[134,119],{"url":144,"sources":145,"tags":146},"https://access.redhat.com/errata/RHSA-2026:34094",[89],[134,119],{"url":148,"sources":149,"tags":150},"https://access.redhat.com/errata/RHSA-2026:36018",[89],[134,119],[],{"date":153,"score":85,"percentile":154},"2026-07-05",0.22796,[156,160,164,167,170,173,177,180,183,186,189,192,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,242,245,248,251,254],{"date":157,"score":158,"percentile":159},"2026-06-04",0.00018,0.04967,{"date":161,"score":162,"percentile":163},"2026-06-05",0.00032,0.09786,{"date":165,"score":162,"percentile":166},"2026-06-06",0.09804,{"date":168,"score":162,"percentile":169},"2026-06-07",0.09778,{"date":171,"score":162,"percentile":172},"2026-06-08",0.09721,{"date":174,"score":175,"percentile":176},"2026-06-09",0.00042,0.13161,{"date":178,"score":175,"percentile":179},"2026-06-10",0.13211,{"date":181,"score":175,"percentile":182},"2026-06-11",0.1324,{"date":184,"score":175,"percentile":185},"2026-06-12",0.13343,{"date":187,"score":175,"percentile":188},"2026-06-13",0.1335,{"date":190,"score":175,"percentile":191},"2026-06-14",0.13326,{"date":193,"score":194,"percentile":195},"2026-06-15",0.00392,0.30695,{"date":197,"score":194,"percentile":198},"2026-06-16",0.30747,{"date":200,"score":194,"percentile":201},"2026-06-17",0.30764,{"date":203,"score":194,"percentile":204},"2026-06-18",0.30814,{"date":206,"score":194,"percentile":207},"2026-06-19",0.3079,{"date":209,"score":194,"percentile":210},"2026-06-20",0.30773,{"date":212,"score":194,"percentile":213},"2026-06-21",0.30755,{"date":215,"score":194,"percentile":216},"2026-06-22",0.30741,{"date":218,"score":194,"percentile":219},"2026-06-23",0.30826,{"date":221,"score":194,"percentile":222},"2026-06-24",0.30861,{"date":224,"score":194,"percentile":225},"2026-06-25",0.3094,{"date":227,"score":194,"percentile":228},"2026-06-26",0.3098,{"date":230,"score":194,"percentile":231},"2026-06-27",0.31012,{"date":233,"score":194,"percentile":234},"2026-06-28",0.30986,{"date":236,"score":194,"percentile":237},"2026-06-29",0.30987,{"date":239,"score":240,"percentile":241},"2026-06-30",0.00302,0.21761,{"date":243,"score":240,"percentile":244},"2026-07-01",0.21872,{"date":246,"score":240,"percentile":247},"2026-07-02",0.21874,{"date":249,"score":85,"percentile":250},"2026-07-03",0.22772,{"date":252,"score":85,"percentile":253},"2026-07-04",0.22786,{"date":153,"score":85,"percentile":154},[256,261],{"source":89,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":257,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":258,"vectorString":90,"impactScore":259,"exploitabilityScore":260},"CRITICAL",8.7,10,{"source":95,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":262,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":258,"vectorString":90,"impactScore":259,"exploitabilityScore":260},[264,290],{"ecosystem":9,"name":265,"vendor":266,"product":266,"cpe_part":267,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":268},"Linux","linux","a",[269,276,279,282,285,288],{"version":270,"is_range":271,"range_type":89,"version_start":272,"version_start_type":273,"version_end":274,"version_end_type":275,"fixed_in":9},">= 3a07327d10a09379315c844c63f27941f5081e0a, \u003C c161ad9157f5a0429b5ff94d9770faf3bf48d273",true,"3a07327d10a09379315c844c63f27941f5081e0a","including","c161ad9157f5a0429b5ff94d9770faf3bf48d273","excluding",{"version":277,"is_range":271,"range_type":89,"version_start":272,"version_start_type":273,"version_end":278,"version_end_type":275,"fixed_in":9},">= 3a07327d10a09379315c844c63f27941f5081e0a, \u003C 870d59e2cf218e7418491e26bad768cb16654582","870d59e2cf218e7418491e26bad768cb16654582",{"version":280,"is_range":271,"range_type":89,"version_start":272,"version_start_type":273,"version_end":281,"version_end_type":275,"fixed_in":9},">= 3a07327d10a09379315c844c63f27941f5081e0a, \u003C 689bbf48c1f45130086ae1c46ab83ea4c753c601","689bbf48c1f45130086ae1c46ab83ea4c753c601",{"version":283,"is_range":271,"range_type":89,"version_start":272,"version_start_type":273,"version_end":284,"version_end_type":275,"fixed_in":9},">= 3a07327d10a09379315c844c63f27941f5081e0a, \u003C d0f98a3617f6ae5b1e95cde1e68e7ead4a1279ce","d0f98a3617f6ae5b1e95cde1e68e7ead4a1279ce",{"version":286,"is_range":271,"range_type":89,"version_start":272,"version_start_type":273,"version_end":287,"version_end_type":275,"fixed_in":9},">= 3a07327d10a09379315c844c63f27941f5081e0a, \u003C b6a91f68ebfed9c38e0e9150f58a9b85da07181c","b6a91f68ebfed9c38e0e9150f58a9b85da07181c",{"version":289,"is_range":83,"range_type":89,"version_start":289,"version_start_type":273,"version_end":289,"version_end_type":273,"fixed_in":9},"6.2",{"ecosystem":9,"name":291,"vendor":266,"product":292,"cpe_part":267,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":293},"Linux Kernel","linux kernel",[294,298,302,306,310,312,314,316],{"version":295,"is_range":271,"range_type":296,"version_start":289,"version_start_type":273,"version_end":297,"version_end_type":275,"fixed_in":9},"gte6.2_lt6.6.142","cpe","6.6.142",{"version":299,"is_range":271,"range_type":296,"version_start":300,"version_start_type":273,"version_end":301,"version_end_type":275,"fixed_in":9},"gte6.7_lt6.12.92","6.7","6.12.92",{"version":303,"is_range":271,"range_type":296,"version_start":304,"version_start_type":273,"version_end":305,"version_end_type":275,"fixed_in":9},"gte6.13_lt6.18.34","6.13","6.18.34",{"version":307,"is_range":271,"range_type":296,"version_start":308,"version_start_type":273,"version_end":309,"version_end_type":275,"fixed_in":9},"gte6.19_lt7.0.11","6.19","7.0.11",{"version":311,"is_range":83,"range_type":296,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.1:rc1",{"version":313,"is_range":83,"range_type":296,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.1:rc2",{"version":315,"is_range":83,"range_type":296,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.1:rc3",{"version":317,"is_range":83,"range_type":296,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.1:rc4"]