CVE-2026-46152

linux kernel

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-46152

Katalog CVE

CVSS 8.8 · High EPSS 0,24%

Kerentanan Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element pada linux kernel. Skor CVSS 3.1 8.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.

Rincian

Terbit di NVD
28 Mei 2026
Terakhir diubah
29 Juli 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber CNA
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1058: Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element
EPSS (30 hari)
0,24% peluang dieksploitasi; lebih tinggi dari 13,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
linux linux kernel Versi 6.4 hingga sebelum 6.6.140
linux linux kernel Versi 6.7 hingga sebelum 6.12.88
linux linux kernel Versi 6.13 hingga sebelum 6.18.30
linux linux kernel Versi 6.19 hingga sebelum 7.0.7
linux linux kernel Versi 7.1 rc1
linux linux kernel Versi 7.1 rc2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.