CVE-2026-46088
In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() snd_ctl_elem_init_enum_names() advances pointer p through the names buffer while decrementing buf_len. If buf_len reaches zero but items remain, the next iteration calls strnlen(p, 0). While strnlen(p, 0) returns 0 and would hit the existing name_len == 0 error path, CONFIG_FORTIFY_SOURCE's fortified strnlen() first checks maxlen against __builtin_dynamic_object_size(). When Clang loses track of p's object size inside the loop, this triggers a BRK exception panic before the return value is examined. Add a buf_len == 0 guard at the loop entry to prevent calling fortified strnlen() on an exhausted buffer. Found by kernel fuzz testing through Xiaomi Smartphone.
Affected versions
Linux kernel versions
3.2
and later are affected. Fixed in
5.10.258,
5.15.209,
6.1.175,
6.6.140,
6.12.86,
6.18.27,
7.0.4,
7.1-rc1
and their respective stable series.
References
The following references provide additional information about CVE-2026-46088 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/1fbe46d2b72754d8bd580e13e59ccb5d3d0e8cb0
-
PatchKernel patch commithttps://git.kernel.org/stable/c/654c818a69c21d2bea4e8fd9eae7da865df9a5c8
-
PatchKernel patch commithttps://git.kernel.org/stable/c/708f6ec9bcdf58bfd561409110baaf4fd3be4ea3
Frequently asked questions
-
What is CVE-2026-46088?
CVE-2026-46088 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 3.2 onward and has been patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-46088 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-46088?
Yes — CVE-2026-46088 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 3.2 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-46088 actively exploited?
No — CVE-2026-46088 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.