Threats tagged 'ghsa-47jg-vqrv-5f8v'

CVE-2026-46300 is a vulnerability in the Linux kernel's network stack where the skb_try_coalesce() function fails to preserve the shared-frag marker during coalescing of socket buffers. This flaw can cause the loss of the SKBFL_SHARED_FRAG flag, which is critical for later in-place writers such as ESP input processing. As a result, ESP may incorrectly decrypt data in place over page-cache-backed fragments, potentially leading to local privilege escalation. The issue has been addressed by propagating the shared-frag marker correctly during coalescing. A patch is available from Red Hat for kernel version 5.14.0-570 and related updates.