What is CVE-2026-46320?

CVE-2026-46320 is a High severity Linux kernel vulnerability with a CVSS score of 7.4 out of 10, affecting Linux kernel versions from 4.20 onward and patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-46320 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-46320?

CVE-2026-46320 has a CVSS score of 7.4 out of 10, rated High severity. The vector string is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Is there a patch available for CVE-2026-46320?

Yes, CVE-2026-46320 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 4.20 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-46320 actively exploited?

CVE-2026-46320 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-46320

High

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than ETH_HLEN with -EINVAL, and returns -ENOMEM when build_skb() fails. Both paths jump to the err label without freeing the page that vhost_net_build_xdp() allocated for the frame. tap_sendmsg() discards the per-buffer return value and always returns 0, so vhost_tx_batch() takes the success path and never frees the page; each rejected frame in a batch leaks one page-frag chunk. Free the page on both error paths, before the skb is built. This is the tap counterpart of the same leak in tun_xdp_one().

Package Linux Kernel

Published 2026-06-09

Last modified 2026-07-23

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.4

out of 10

High

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected versions

Linux kernel versions 4.20 and later are affected. Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.12, 7.1 and their respective stable series.

Affected from

≥ 4.20

Fixed in

✓ 5.10.259 5.10.x ✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.94 6.12.x ✓ 6.18.36 6.18.x ✓ 7.0.12 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/18a84c35842e19cd3c5534d8cee73d31863f696d

Patch
Kernel Git
https://git.kernel.org/stable/c/3bcf7aec6a9d16438f2cec29f5d7c8d5b8edf9b2

Patch
Kernel Git
https://git.kernel.org/stable/c/3f52a86a482a69294c50a5a2a097bd6f4104990a

Patch
Kernel Git
https://git.kernel.org/stable/c/8d03e65eb6cfbffec471a6b65416f93679bf3286

Patch
Kernel Git
https://git.kernel.org/stable/c/d30aac0fa00ca0afc3e08174cf7f974a66bdcf05

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-46320

Severity High

CVSS score 7.4 / 10

CVSS version 3.1

Published 2026-06-09

Modified 2026-07-23

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-46320?

CVE-2026-46320 is a High severity Linux kernel vulnerability with a CVSS score of 7.4 out of 10 . It affects Linux kernel versions from 4.20 onward and has been patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-46320 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-46320?

CVE-2026-46320 has a CVSS score of 7.4 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Is there a patch available for CVE-2026-46320?

Yes. CVE-2026-46320 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 4.20 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-46320 actively exploited?

No. CVE-2026-46320 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.