The Linux kernel vulnerability CVE-2026-46333 enables an unprivileged user to read root-owned files, potentially bypassing security restrictions. This issue is addressed in Red Hat security advisories RHSA-2026:19540 and RHSA-2026:19521, which provide kernel updates for Red Hat Enterprise Linux and related distributions. The advisories also mention related vulnerabilities such as CVE-2026-46300, a local privilege escalation vulnerability known as "Fragnesia," a variant of the Dirty Frag vulnerability. The vendor has rated the update as Important to Critical severity and has provided patches for affected kernel versions. Systems must be rebooted after applying the update for the fix to take effect.

An unprivileged user could read files owned by root, potentially exposing sensitive information. This could lead to unauthorized access to privileged data. The vulnerability is part of a broader set of kernel security issues that include local privilege escalation and denial of service. No known exploits in the wild have been reported at this time.

Red Hat has released official security updates that address CVE-2026-46333 and related vulnerabilities. Users should apply the provided kernel updates from the Red Hat advisories RHSA-2026:19540 and RHSA-2026:19521 promptly. A system reboot is required for the updates to take effect. Patch status is confirmed as official-fix. No additional mitigation steps are indicated beyond applying the vendor-provided patches.