CVE-2026-46319

🗓️ 09 Jun 2026 12:11:12Reported by LinuxType

Linux kernel act_ct releases RCU lock after ct_ft lookup, causing use-after-free and privilege escalation.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-46319	9 Jun 202613:34	–	circl
Cvelist	CVE-2026-46319 net/sched: act_ct: Only release RCU read lock after ct_ft	9 Jun 202612:11	–	cvelist
Debian CVE	CVE-2026-46319	9 Jun 202612:11	–	debiancve
EUVD	EUVD-2026-35409	9 Jun 202612:11	–	euvd
NVD	CVE-2026-46319	9 Jun 202613:16	–	nvd
OSV	DEBIAN-CVE-2026-46319	9 Jun 202613:48	–	osv
Positive Technologies	PT-2026-47756	9 Jun 202600:00	–	ptsecurity

Vulners

CNA

Node

linux linux_kernelRange5.7–5.10.258

linux linux_kernelRange5.11.0–5.15.209

linux linux_kernelRange5.16.0–6.1.175

linux linux_kernelRange6.2.0–6.6.141

linux linux_kernelRange6.7.0–6.12.91

linux linux_kernelRange6.13.0–6.18.33

linux linux_kernelRange6.19.0–7.0.10

linux linux_kernelRange7.1.0–7.1-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/sched/act_ct.c"
    ],
    "versions": [
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "ece578ca61e572df96cfc80456357ebfae0b4b9e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "a2e0c045c87aa252eb61412e67dd91f2c2b19f81",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "67c9ecc9f2575273ed1323e312881fc98ac83d6d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "f23424a0ddadb494d4bd57056a7ca703312d3a7b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "17dfb67cb399b660105d9a8c6100851c0d0cdc70",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "4c727c6967a41b37efe0f26332ca9ec5b74785a3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "3e20e1b3058e0b94638e7b931c138e840e266724",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "138470a9b2cc2e26e6018300394afc3858a54e6a",
        "lessThan": "f462dca0c8415bf0058d0ffa476354c4476d0f09",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/sched/act_ct.c"
    ],
    "versions": [
      {
        "version": "5.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.7",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.141",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.91",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.33",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.10",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/67c9ecc9f2575273ed1323e312881fc98ac83d6d
git	www.git.kernel.org/stable/c/3e20e1b3058e0b94638e7b931c138e840e266724
git	www.git.kernel.org/stable/c/17dfb67cb399b660105d9a8c6100851c0d0cdc70
git	www.git.kernel.org/stable/c/f462dca0c8415bf0058d0ffa476354c4476d0f09
git	www.git.kernel.org/stable/c/f23424a0ddadb494d4bd57056a7ca703312d3a7b
git	www.git.kernel.org/stable/c/a2e0c045c87aa252eb61412e67dd91f2c2b19f81
git	www.git.kernel.org/stable/c/4c727c6967a41b37efe0f26332ca9ec5b74785a3
git	www.git.kernel.org/stable/c/ece578ca61e572df96cfc80456357ebfae0b4b9e

09 Jun 2026 13:16Current

5.4Medium risk

Vulners AI Score5.4