[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-46274":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":14,"duplicates":55,"related":56,"reserved_at":9,"published_at":68,"modified_at":69,"state":70,"summary":71,"references_raw":80,"kevs":102,"epss":103,"epss_history":106,"metrics":187,"affected":195},"CVE-2026-46274","In the Linux kernel, the following vulnerability has been resolved:\n\nio-wq: check that the predecessor is hashed in io_wq_remove_pending()\n\nio_wq_remove_pending() needs to fix up wq->hash_tail[] if the cancelled\nwork was the tail of its hash bucket. When doing this, it checks whether\nthe preceding entry in acct->work_list has the same hash value, but\nnever checks that the predecessor is hashed at all. io_get_work_hash()\nis simply atomic_read(&work->flags) >> IO_WQ_HASH_SHIFT, and the hash\nbits are never set for non-hashed work, so it returns 0. Thus, when a\nhashed bucket-0 work is cancelled while a non-hashed work is its list\npredecessor, the check spuriously passes and a pointer to the non-hashed\nio_kiocb is stored in wq->hash_tail[0].\n\nBecause non-hashed work is dequeued via the fast path in\nio_get_next_work(), which never touches hash_tail[], the stale pointer\nis never cleared. Therefore, after the non-hashed io_kiocb completes and\nis freed back to req_cachep, wq->hash_tail[0] is a dangling pointer. The\nio_wq is per-task (tctx->io_wq) and survives ring open/close, so the\ndangling pointer persists for the lifetime of the task; the next hashed\nbucket-0 enqueue dereferences it in io_wq_insert_work() and\nwq_list_add_after() writes through freed memory.\n\nAdd the missing io_wq_is_hashed() check so a non-hashed predecessor\nnever inherits a hash_tail[] slot.",null,[],[],[],[],[15,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53],{"_key":16},"OPENSUSE-SU-2026:11014-1",{"_key":18},"DEBIAN-CVE-2026-46274",{"_key":20},"SUSE-SU-2026:22521-1",{"_key":22},"SUSE-SU-2026:22522-1",{"_key":24},"SUSE-SU-2026:2799-1",{"_key":26},"SUSE-SU-2026:2800-1",{"_key":28},"SUSE-SU-2026:22665-1",{"_key":30},"SUSE-SU-2026:22666-1",{"_key":32},"SUSE-SU-2026:2840-1",{"_key":34},"SUSE-SU-2026:2841-1",{"_key":36},"SUSE-SU-2026:3044-1",{"_key":38},"SUSE-SU-2026:3089-1",{"_key":40},"UBUNTU-CVE-2026-46274",{"_key":42},"USN-8566-1",{"_key":44},"USN-8567-1",{"_key":46},"USN-8568-1",{"_key":48},"USN-8569-1",{"_key":50},"USN-8574-1",{"_key":52},"USN-8575-1",{"_key":54},"USN-8576-1",[],[57,58,59,60,61,62,63,64,65,66,67],{"_key":16},{"_key":20},{"_key":22},{"_key":24},{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},"2026-06-08T14:30:53.323Z","2026-06-14T18:05:34.336Z","Received",{"cisa_kev":72,"cisa_ransomware":72,"cisa_vendor":9,"epss_severity":73,"epss_score":74,"severity":75,"severity_score":76,"severity_version":77,"severity_source":78,"severity_vector":79,"severity_status":70},false,"low",0.00138,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[81,86,90,94,98],{"url":82,"sources":83,"tags":85},"https://git.kernel.org/stable/c/d6bda9df0c0a3080804181464d5c0f4d78a4e769",[78,84],"nvd",[],{"url":87,"sources":88,"tags":89},"https://git.kernel.org/stable/c/5a20ebf0c81b61f5ea3b1b529c100cad69b9f603",[78,84],[],{"url":91,"sources":92,"tags":93},"https://git.kernel.org/stable/c/252c5051dba9c709b6a72f2866f93e5e618b3f06",[78,84],[],{"url":95,"sources":96,"tags":97},"https://git.kernel.org/stable/c/d376c131af7c7739a87ff037ed2fdb67c2542c8a",[78,84],[],{"url":99,"sources":100,"tags":101},"https://git.kernel.org/stable/c/d6a2d7b04b5a093021a7a0e2e69e9d5237dfa8cc",[78,84],[],[],{"date":104,"score":74,"percentile":105},"2026-07-05",0.0355,[107,111,114,117,120,123,127,130,133,136,139,142,145,147,150,153,156,159,162,165,168,171,174,177,180,183,186],{"date":108,"score":109,"percentile":110},"2026-06-09",0.00018,0.04965,{"date":112,"score":109,"percentile":113},"2026-06-10",0.04993,{"date":115,"score":109,"percentile":116},"2026-06-11",0.05008,{"date":118,"score":109,"percentile":119},"2026-06-12",0.05012,{"date":121,"score":109,"percentile":122},"2026-06-13",0.04998,{"date":124,"score":125,"percentile":126},"2026-06-14",0.00013,0.02358,{"date":128,"score":74,"percentile":129},"2026-06-15",0.03471,{"date":131,"score":74,"percentile":132},"2026-06-16",0.03481,{"date":134,"score":74,"percentile":135},"2026-06-17",0.03493,{"date":137,"score":74,"percentile":138},"2026-06-18",0.03494,{"date":140,"score":74,"percentile":141},"2026-06-19",0.03488,{"date":143,"score":74,"percentile":144},"2026-06-20",0.03486,{"date":146,"score":74,"percentile":144},"2026-06-21",{"date":148,"score":74,"percentile":149},"2026-06-22",0.03484,{"date":151,"score":74,"percentile":152},"2026-06-23",0.03502,{"date":154,"score":74,"percentile":155},"2026-06-24",0.03503,{"date":157,"score":74,"percentile":158},"2026-06-25",0.03519,{"date":160,"score":74,"percentile":161},"2026-06-26",0.03537,{"date":163,"score":74,"percentile":164},"2026-06-27",0.03543,{"date":166,"score":74,"percentile":167},"2026-06-28",0.03563,{"date":169,"score":74,"percentile":170},"2026-06-29",0.03561,{"date":172,"score":74,"percentile":173},"2026-06-30",0.03557,{"date":175,"score":74,"percentile":176},"2026-07-01",0.03564,{"date":178,"score":74,"percentile":179},"2026-07-02",0.03553,{"date":181,"score":74,"percentile":182},"2026-07-03",0.03547,{"date":184,"score":74,"percentile":185},"2026-07-04",0.03549,{"date":104,"score":74,"percentile":105},[188,193],{"source":78,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":189,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":190,"vectorString":79,"impactScore":191,"exploitabilityScore":192},"HIGH",9.8,4.6,{"source":84,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":194,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":190,"vectorString":79,"impactScore":191,"exploitabilityScore":192},[196],{"ecosystem":9,"name":197,"vendor":198,"product":198,"cpe_part":199,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":200},"Linux","linux","a",[201,208,211,214,217,220,222,226],{"version":202,"is_range":203,"range_type":78,"version_start":204,"version_start_type":205,"version_end":206,"version_end_type":207,"fixed_in":9},">= 204361a77f4018627addd4a06877448f088ddfc0, \u003C d6bda9df0c0a3080804181464d5c0f4d78a4e769",true,"204361a77f4018627addd4a06877448f088ddfc0","including","d6bda9df0c0a3080804181464d5c0f4d78a4e769","excluding",{"version":209,"is_range":203,"range_type":78,"version_start":204,"version_start_type":205,"version_end":210,"version_end_type":207,"fixed_in":9},">= 204361a77f4018627addd4a06877448f088ddfc0, \u003C 5a20ebf0c81b61f5ea3b1b529c100cad69b9f603","5a20ebf0c81b61f5ea3b1b529c100cad69b9f603",{"version":212,"is_range":203,"range_type":78,"version_start":204,"version_start_type":205,"version_end":213,"version_end_type":207,"fixed_in":9},">= 204361a77f4018627addd4a06877448f088ddfc0, \u003C 252c5051dba9c709b6a72f2866f93e5e618b3f06","252c5051dba9c709b6a72f2866f93e5e618b3f06",{"version":215,"is_range":203,"range_type":78,"version_start":204,"version_start_type":205,"version_end":216,"version_end_type":207,"fixed_in":9},">= 204361a77f4018627addd4a06877448f088ddfc0, \u003C d376c131af7c7739a87ff037ed2fdb67c2542c8a","d376c131af7c7739a87ff037ed2fdb67c2542c8a",{"version":218,"is_range":203,"range_type":78,"version_start":204,"version_start_type":205,"version_end":219,"version_end_type":207,"fixed_in":9},">= 204361a77f4018627addd4a06877448f088ddfc0, \u003C d6a2d7b04b5a093021a7a0e2e69e9d5237dfa8cc","d6a2d7b04b5a093021a7a0e2e69e9d5237dfa8cc",{"version":221,"is_range":72,"range_type":78,"version_start":221,"version_start_type":205,"version_end":221,"version_end_type":205,"fixed_in":9},"13f35a2c0fd5c6a4fcd8903542b053bcc914fcf5",{"version":223,"is_range":203,"range_type":78,"version_start":224,"version_start_type":205,"version_end":225,"version_end_type":207,"fixed_in":9},">= 5.8.6, \u003C 5.9","5.8.6","5.9",{"version":225,"is_range":72,"range_type":78,"version_start":225,"version_start_type":205,"version_end":225,"version_end_type":205,"fixed_in":9}]