The Linux kernel vulnerability CVE-2026-46333 permits unprivileged users to read files owned by the root user, circumventing standard security controls. This vulnerability is addressed alongside CVE-2026-46300, a local privilege escalation flaw known as "Fragnesia," in kernel updates released by Red Hat. The advisories cover multiple Red Hat Enterprise Linux versions and related distributions. Red Hat classifies the update fixing CVE-2026-46333 as important, with a critical impact rating for the overall kernel update. The fix requires installing updated kernel packages and rebooting the system. The vulnerability affects the core Linux kernel component, which is fundamental to system security and operation.

Successful exploitation of CVE-2026-46333 allows an unprivileged user to read files owned by the root user, potentially exposing sensitive information and bypassing security mechanisms. This compromises the confidentiality of data on affected systems. The vulnerability is part of a broader set of kernel security issues that include local privilege escalation vulnerabilities, increasing the risk profile if combined. The kernel is a critical component of the operating system, so vulnerabilities here can have significant security implications.

Red Hat has released official security updates addressing CVE-2026-46333 and related vulnerabilities. Applying the updated kernel packages from Red Hat's advisories and rebooting the system is required to remediate the issue. Users should follow the instructions in the Red Hat advisory (https://access.redhat.com/articles/11258) to apply these updates. No alternative mitigations or workarounds are indicated in the vendor advisory. Patch status is confirmed as official-fix.