What is CVE-2026-46222?

CVE-2026-46222 is a unscored severity Linux kernel vulnerability, affecting Linux kernel versions from 6.19 onward and patched in 7.0.9 and 7.1-rc1. CVE-2026-46222 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-46222?

CVE-2026-46222 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-46222?

Yes, CVE-2026-46222 has been patched. Fixed versions include 7.0.9 and 7.1-rc1. If you are running Linux kernel 6.19 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-46222 actively exploited?

CVE-2026-46222 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-46222

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads The pads missed checks for connected devices which may a null dereference when the stream is enabled. Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 pc : rkcif_interface_enable_streams+0x48/0xf0 lr : rkcif_interface_enable_streams+0x44/0xf0 Call trace: rkcif_interface_enable_streams+0x48/0xf0 v4l2_subdev_enable_streams+0x26c/0x3f0 rkcif_stream_start_streaming+0x140/0x278 vb2_start_streaming+0x74/0x188 vb2_core_streamon+0xe0/0x1d8 vb2_ioctl_streamon+0x60/0xa8 v4l_streamon+0x2c/0x40 __video_do_ioctl+0x34c/0x400 video_usercopy+0x2d0/0x800 video_ioctl2+0x20/0x60 v4l2_ioctl+0x48/0x78

Package Linux Kernel

Published 2026-05-28

Last modified 2026-05-28

Patch available

Yes

Affected versions

Linux kernel versions 6.19 and later are affected. Fixed in 7.0.9, 7.1-rc1 and their respective stable series.

Affected from

≥ 6.19

Fixed in

✓ 7.0.9 7.0.x ✓ 7.1-rc1

References

The following references provide additional information about CVE-2026-46222 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/318142640590342bfec7aa06d0bdcd0ddbf953d0
Patch
Kernel patch commit
https://git.kernel.org/stable/c/8e3c751259dc2d1325838eff26f41032523c7b57
Patch

Frequently asked questions

What is CVE-2026-46222?

CVE-2026-46222 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.19 onward and has been patched in 7.0.9 and 7.1-rc1. CVE-2026-46222 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-46222?

Yes — CVE-2026-46222 has been patched. Fixed versions include 7.0.9 and 7.1-rc1. If you are running Linux kernel 6.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-46222 actively exploited?

No — CVE-2026-46222 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.