What is CVE-2026-46322?

CVE-2026-46322 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10, affecting Linux kernel versions from 4.20 onward and patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-46322 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-46322?

CVE-2026-46322 has a CVSS score of 7.1 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Is there a patch available for CVE-2026-46322?

Yes, CVE-2026-46322 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 4.20 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-46322 actively exploited?

CVE-2026-46322 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-46322

High

In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the function sets ret to -ENOMEM and jumps to the out label, which returns without freeing the page that vhost_net_build_xdp() allocated for the frame. As with the short-frame rejection path, tun_sendmsg() discards the per-buffer error and still returns total_len, so vhost_tx_batch() takes the success path and never frees the page. Each build_skb() failure in a batch leaks one page-frag chunk. Free the page before taking the error path, matching the put_page() the other error exits of tun_xdp_one() already perform.

Package Linux Kernel

Published 2026-06-09

Last modified 2026-07-23

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.1

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected versions

Linux kernel versions 4.20 and later are affected. Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12, 7.1 and their respective stable series.

Affected from

≥ 4.20

Fixed in

✓ 5.10.259 5.10.x ✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.93 6.12.x ✓ 6.18.35 6.18.x ✓ 7.0.12 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/2638a9c1521905bb5c5d1e95c8fbc09f79148ed7

Patch
Kernel Git
https://git.kernel.org/stable/c/26fe549b5192536b6c1c68a2dfdc8c0dcf9fa4a9

Patch
Kernel Git
https://git.kernel.org/stable/c/4fefc6156a162a9f50035c12091a5e5130c82c6e

Patch
Kernel Git
https://git.kernel.org/stable/c/60d9c0d6cdde5420d6483c921b16fe5465eb5238

Patch
Kernel Git
https://git.kernel.org/stable/c/793385c154771603b8671dd8338927221e9d8d78

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-46322

Severity High

CVSS score 7.1 / 10

CVSS version 3.1

Published 2026-06-09

Modified 2026-07-23

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-46322?

CVE-2026-46322 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10 . It affects Linux kernel versions from 4.20 onward and has been patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-46322 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-46322?

CVE-2026-46322 has a CVSS score of 7.1 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Is there a patch available for CVE-2026-46322?

Yes. CVE-2026-46322 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 4.20 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-46322 actively exploited?

No. CVE-2026-46322 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.