net: skbuff: preserve shared-frag marker during coalescing
Products / packages Linux · Red Hat NVIDIA for RHEL 10 · Red Hat Enterprise Linux 10 · 30 more
Published
Severity and exploitation
Assessment vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAssessment vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSeverity
high7.8CVSS measures technical severity, not the likelihood of an attack.
Known exploitation
Confirmed exploited · CISA KEV
CISA has recorded exploitation in the wild. Review its required action.
Public exploit
Exploit reference published
Source-linked evidence; not proof of attacks in the wild or independent validation.
Remediation
Source guidance available
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
What this means
In the Linux kernel, the following vulnerability has been resolved:
Source excerpt · LinuxAttack conditions
No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.
Review supporting sources →Affected versions
Check the exact model, release, and any platform requirements against your installation.
Linux · Linux
Linux
8 ranges
Linux · Linux
Linux
Compare with this publisher’s ranges. This does not inspect your installation.
affected
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 3599e6b3cc1ada96883d496a50a210d3afbb6987
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 78bf6b6bb19541d19fbda6242e7cfe2c682763c0
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 3bd9e113d50034db99d7ef69fd8e5242d15e414a
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before 3884358a9286b17f389a72b1426fc4547c23c111
git versions
cef401de7be8c4e155c6746bfccf721a4fa5fab9 → before f84eca5817390257cef78013d0112481c503b4a3
git versions
Other versions: unaffected
Linux · Linux
Linux
10 ranges
Linux · Linux
Linux
Compare with this publisher’s ranges. This does not inspect your installation.
affected
3.9
unaffected
0 → before 3.9
semver versions
5.10.257 → through 5.10.*
semver versions
5.15.208 → through 5.15.*
semver versions
6.1.174 → through 6.1.*
semver versions
6.6.141 → through 6.6.*
semver versions
6.12.91 → through 6.12.*
semver versions
6.18.33 → through 6.18.*
semver versions
7.0.10 → through 7.0.*
semver versions
7.1 → through *
original_commit_for_fix versions
Other versions: affected
Red Hat · redhat-SADP
NVIDIA for RHEL 10
2 ranges
Red Hat · redhat-SADP
NVIDIA for RHEL 10
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:6.12.0-211.8.el10nv → before *
rpm versions
0:6.12.0-231.12.el10nv → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux_nvidia:10::el10Red Hat · redhat-SADP
Red Hat Enterprise Linux 10
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 10
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:6.12.0-211.16.1.el10_2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:10.2Red Hat · redhat-SADP
Red Hat Enterprise Linux 10.0 Extended Update Support
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 10.0 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:6.12.0-55.75.1.el10_0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux_eus:10.0Red Hat · redhat-SADP
Red Hat Enterprise Linux 8
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-553.125.1.rt7.466.el8_10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:8::nfvRed Hat · redhat-SADP
Red Hat Enterprise Linux 8
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-553.125.1.el8_10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:8Red Hat · redhat-SADP
Red Hat Enterprise Linux 8
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:8Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-305.192.1.el8_4 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_aus:8.4Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-305.192.1.el8_4 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_eus_long_life:8.4Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-372.193.1.el8_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_aus:8.6Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-372.193.1.el8_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_tus:8.6Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-372.193.1.el8_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_e4s:8.6Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-477.143.1.el8_8 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_tus:8.8Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.18.0-477.143.1.el8_8 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_e4s:8.8Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:rhel_e4s:8.8Red Hat · redhat-SADP
Red Hat Enterprise Linux 9
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-687.10.1.el9_8 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:9cpe:/o:redhat:enterprise_linux:9Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-70.180.1.el9_0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:9.0Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-70.180.1.rt21.252.el9_0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:9.0::nfvRed Hat · redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-284.172.1.el9_2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:9.2Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-284.172.1.rt14.457.el9_2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:9.2::nfvRed Hat · redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:rhel_e4s:9.2Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.4 Extended Update Support
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.4 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-427.126.1.el9_4 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_eus:9.4Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:rhel_e4s:9.4Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.6 Extended Update Support
1 range
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.6 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-570.116.1.el9_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_eus:9.6Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.6 Extended Update Support
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 9.6 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:rhel_eus:9.6Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.12
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.12
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
412.86.202605271418-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.12::el8Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.13
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.13
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
413.92.202605271328-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.13::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.14
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.14
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
414.92.202606231112-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.14::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.15
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.15
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
415.92.202606030318-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.15::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.16
2 ranges
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.16
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
416.94.202605200242-0 → before *
rpm versions
416.94.202606051757-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.16::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.17
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.17
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
417.94.202606250942-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.17::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.18
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.18
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
418.94.202605260517-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.18::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.19
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.19
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
4.19.9.6.202606031700-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.19::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.20
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.20
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
4.20.9.6.202605270908-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.20::el9Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.21
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.21
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:5.14.0-570.116.1.el9_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.21::el8Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.21
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.21
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:4.21.0-202605142021.p2.geab2218.assembly.stream.el10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.21::el8Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.21
1 range
Red Hat · redhat-SADP
Red Hat OpenShift Container Platform 4.21
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
4.21.9.6.202606030721-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.21::el9Red Hat · redhat-SADP
Red Hat Enterprise Linux 6
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 6
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:6Red Hat · redhat-SADP
Red Hat Enterprise Linux 7
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:7Red Hat · redhat-SADP
Red Hat Enterprise Linux 7
0 ranges
Red Hat · redhat-SADP
Red Hat Enterprise Linux 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:7Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.6 → before V3.1.7
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.5 → before *
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.6 → before V3.1.7
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.5 → before *
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.6 → before V3.1.7
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.5 → before *
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.6 → before V3.1.7
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.5 → before *
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.6 → before V3.1.7
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.5 → before *
custom versions
Other versions: unknown
What to do
Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.
RHSA-2026:19540: NVIDIA for RHEL 10
RHSA-2026:33486: NVIDIA for RHEL 10
RHBA-2026:20032: Red Hat OpenShift Container Platform 4.21
RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12
RHSA-2026:21690: Red Hat OpenShift Container Platform 4.13
RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14
RHSA-2026:23233: Red Hat OpenShift Container Platform 4.15
RHSA-2026:20087: Red Hat OpenShift Container Platform 4.16
RHSA-2026:25044: Red Hat OpenShift Container Platform 4.16
RHSA-2026:34098: Red Hat OpenShift Container Platform 4.17
RHSA-2026:21656: Red Hat OpenShift Container Platform 4.18
RHSA-2026:23245: Red Hat OpenShift Container Platform 4.19
RHSA-2026:21702: Red Hat OpenShift Container Platform 4.20
RHSA-2026:23240: Red Hat OpenShift Container Platform 4.21
RHSA-2026:20299: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)
RHSA-2026:19569: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)
RHSA-2026:19705: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)
RHSA-2026:20593: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)
RHSA-2026:20054: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)
RHSA-2026:20129: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)
RHSA-2026:19568: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)
RHSA-2026:19666: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)
RHSA-2026:23470: Red Hat Enterprise Linux BaseOS (v. 8)
RHSA-2026:20130: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)
RHSA-2026:20051: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)
RHSA-2026:19521: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)
RHSA-2026:23471: Red Hat Enterprise Linux BaseOS E4S (v.8.8)
RHSA-2026:23469: Red Hat Enterprise Linux BaseOS E4S (v.9.2)
RHSA-2026:24814: Red Hat Enterprise Linux BaseOS E4S (v.9.4)
RHSA-2026:23468: Red Hat Enterprise Linux BaseOS EUS (v.9.6)
RHSA-2026:19664: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)
RHSA-2026:19711: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)
RHSA-2026:19875: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
See the security bulletin for a detailed mitigation procedure.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA required action ↗cve.new guidance unless attributed to a publisher. This page does not inspect your installation.
Public exploit evidence
The sources identify public exploit references. We have not independently tested them; their availability does not establish exploitation in the wild.
www.exploit-db.com/exploits/52591 ↗Attributed to Exploit-DBOriginal source description
Read the full publisher description
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost.
That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags.
Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.
References
51 sourcesView 45 more references
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-46300View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Environment requirements
These conditions apply together as specified by the publisher. A matching product name alone does not establish exposure.
Linux · platform conditions
Any condition may hold
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 5.10.257
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 5.15.208
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 6.1.174
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 6.6.141
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 6.12.91
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 6.18.33
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 7.0.10
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 3.9
Before: 7.1
Original applicability statements
[
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "5.10.257"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "5.15.208"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "6.1.174"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "6.6.141"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "6.12.91"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "6.18.33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "7.0.10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "7.1"
}
]
}
]
}
]Contributing organizations · 5
Assigning organization
Additional data publisher
Additional data publisher
Additional data publisher
Additional data publisher
Timeline
All times UTCAdvisory published
Publication date supplied by the source.
Added to CISA KEV
CISA recorded known exploitation.
Source updated
Latest modification date supplied by the source.
Last imported by cve.new
Latest catalog import, not the date we first saw this advisory.
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.