Threats Tagged 'cve-2026-46056'

A use-after-free vulnerability in the Linux kernel's CAN ISO-TP implementation (isotp_sendmsg) was resolved. The issue occurs when tx.buf is freed prematurely during socket release while still potentially being accessed, leading to memory corruption. This vulnerability affects multiple Linux kernel versions prior to 6.8.0 and related distributions. It has a high severity with a CVSS score of 7.8. A patch is available and should be applied to prevent potential system compromise.

A use-after-free (UAF) vulnerability was identified and resolved in the Linux kernel's Bluetooth subsystem, specifically in the SSP passkey handlers. The flaw involved insufficient locking around connection lookup and field access, which could lead to concurrent freeing of connections. This vulnerability has a high CVSS score of 8.8, indicating significant potential impact on confidentiality, integrity, and availability. The issue is fixed by extending the hci_dev_lock critical section to cover all connection usage in the affected handlers. Multiple Linux kernel versions prior to 6.8.0-1061.64~22.04.1 and related builds are affected. A patch is available and should be applied to mitigate the risk.

A high severity use-after-free vulnerability (CVE-2026-31669) in the Linux kernel's Multipath TCP (MPTCP) implementation was resolved. The flaw involves incorrect socket memory allocation for MPTCP IPv6 subflow child sockets due to improper slab cache initialization, leading to potential memory corruption. This vulnerability could allow an attacker to cause system compromise with high impact on confidentiality, integrity, and availability. Multiple Linux kernel subsystems were updated to fix this and related issues. Official patches are available and included in updated Linux kernel versions. Users should apply these updates and reboot to mitigate the risk.