The Linux kernel vulnerability CVE-2026-46007 involves the hardware monitoring (hwmon) subsystem on powerz architecture, where DMA transfer buffers could share cachelines with mutexes, potentially causing problematic behavior. The fix applies high-level DMA helpers to ensure cacheline sharing does not occur. This issue is addressed in the Linux kernel updates released by Ubuntu and others, which include numerous other kernel security fixes. The vulnerability affects many specific kernel versions prior to 7.0.0-27.27, as detailed in the affectedVersions list. The vendor advisory confirms that patches are available and users should update to the fixed kernel versions.

The vulnerability can cause issues related to cacheline sharing in DMA buffers, which may lead to system instability or denial of service (indicated by the CVSS vector showing no confidentiality or integrity impact but high availability impact). There is no indication of remote exploitability or data compromise. The medium severity reflects the potential for system disruption rather than data loss or privilege escalation.

A patch is available and should be applied by updating the Linux kernel to the fixed versions listed in the vendor advisory. After updating, a system reboot is required to apply the changes. Due to ABI changes, recompilation and reinstallation of third-party kernel modules may be necessary. Users should follow standard system update procedures to obtain the fixed kernel packages.