Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

linux

linux-allwinner-5.19

linux-aws

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-aws-6.8

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-6.8

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-gcp-6.8

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-hwe-6.8

linux-ibm

linux-ibm-6.8

linux-intel-iot-realtime

linux-intel-iotg

linux-kvm

linux-lowlatency

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-lowlatency-hwe-6.8

linux-nvidia

linux-nvidia-6.2

linux-nvidia-6.5

linux-nvidia-6.8

linux-nvidia-tegra

linux-nvidia-tegra-igx

linux-oem-5.17

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()

The commit c8e008b60492 ("ext4: ignore xattrs past end")
introduced a refcount leak in when block_csum is false.

ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to
get iloc.bh, but never releases it with brelse().

CVE-2026-46046 addresses a refcount leak in the Linux kernel ext4 filesystem caused by a missing brelse() call in the ext4_xattr_inode_dec_ref_all() function. The commit c8e008b60492 introduced this leak when block_csum is false, as ext4_xattr_inode_dec_ref_all() obtains a buffer head (iloc.bh) via ext4_get_inode_loc() but fails to release it with brelse(). This results in a resource leak that can impact system availability. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with local attack vector, low complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. Multiple Linux kernel versions prior to various 5.15.x-xxx releases are affected. The vendor (Ubuntu) has released patches in updated kernel packages and advises rebooting after update.

Detailed information about UBUNTU-CVE-2026-46046 affecting null linux-hwe-edge. Get real-time updates, technical details, and mitigation strategies.

UBUNTU-CVE-2026-46046 - Live Threat Intelligence - Threat Radar | OffSeq.com

In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit… (CVE-2026-46046)

CVE-2026-46046 is a vulnerability related to the ext4 filesystem implementation, specifically addressing a missing brelse() call in the ext4_xattr_inode_dec_ref_all() function. The provided information does not include technical details beyond this fix indication, nor does it specify the impact or exploitation methods. There is no CVSS score or detailed vendor advisory content available. The affected products include Microsoft and Azure Linux versions 3.0. No known exploits in the wild have been reported, and no patch or remediation details are provided.

This vulnerability concerns a missing brelse() call in the ext4_xattr_inode_dec_ref_all() function within the ext4 filesystem code. The brelse() function is typically used to release buffer heads, and its absence could lead to resource management issues. The vulnerability affects Microsoft and Azure Linux 3.0 versions. No further technical details, CVSS score, or exploit information is available from the provided data.

Detailed information about ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() affecting Microsoft Security Response Center Microsoft. Get real-time up

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-46046 ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()


In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit… (CVE-2026-46046)CVE-2026-46046 0 In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit c8e008b60492 ("ext4: ignore xattrs past end") introduced a refcount leak in when block_csum is false. ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to get iloc.bh, but never releases it with brelse(). MediumVulnerability#gcve #osv #ubuntu-cve-2026-46046 Join the discussion	GCVE Database	05/27/2026, 15:33:22 UTC Added: 07/17/2026, 10:21:27 UTC
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()CVE-2026-46046 0 CVE-2026-46046 is a vulnerability related to the ext4 filesystem implementation, specifically addressing a missing brelse() call in the ext4_xattr_inode_dec_ref_all() function. The provided information does not include technical details beyond this fix indication, nor does it specify the impact or exploitation methods. There is no CVSS score or detailed vendor advisory content available. The affected products include Microsoft and Azure Linux versions 3.0. No known exploits in the wild have been reported, and no patch or remediation details are provided. MediumVulnerability#gcve #csaf #cve-2026-46046 Join the discussion	GCVE Database	05/02/2026, 00:00:00 UTC Added: 05/28/2026, 20:54:30 UTC

Threats Tagged 'cve-2026-46046'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-46046'

Lead Pen Test Professional