CVE-2026-46024 (GCVE-0-2026-46024)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:56 – Updated: 2026-08-05 12:29
VLAI
Title
libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() If a message of type CEPH_MSG_AUTH_REPLY contains a zero value for both protocol and result, this is currently not treated as an error. In case of ac->negotiating == true and ac->protocol > 0, this leads to setting ac->protocol = 0 and ac->ops = NULL. Thereafter, the check for ac->protocol != protocol returns false, and init_protocol() is not called. Subsequently, ac->ops->handle_reply() is called, which leads to a null pointer dereference, because ac->ops is still NULL. This patch changes the check for ac->protocol != protocol to !ac->protocol, as this also includes the case when the protocol was set to zero in the message. This causes the message to be treated as containing a bad auth protocol.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < 9ded62c302c0342efdb5eda3bf6e75720caad0df (git)
Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < f101271fcf55d7eacfefd610b51ec65f46ba8118 (git)
Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < 4b2738b93edad661178340239de657d876b73d3d (git)
Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < 927e4bd5692f2a4901808822981fb2c8d4456548 (git)
Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < 016bc663657366d386993f63eb31072eb45a2b77 (git)
Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < 8f2be7285941a33a9f72579a23b96392f83c758e (git)
Affected: 4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc , < 5199c125d25aeae8615c4fc31652cc0fe624338e (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.34
Unaffected: 0 , < 2.6.34 (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.86 , ≤ 6.12.* (semver)
Unaffected: 6.18.27 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ceph/auth.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9ded62c302c0342efdb5eda3bf6e75720caad0df",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            },
            {
              "lessThan": "f101271fcf55d7eacfefd610b51ec65f46ba8118",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            },
            {
              "lessThan": "4b2738b93edad661178340239de657d876b73d3d",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            },
            {
              "lessThan": "927e4bd5692f2a4901808822981fb2c8d4456548",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            },
            {
              "lessThan": "016bc663657366d386993f63eb31072eb45a2b77",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            },
            {
              "lessThan": "8f2be7285941a33a9f72579a23b96392f83c758e",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            },
            {
              "lessThan": "5199c125d25aeae8615c4fc31652cc0fe624338e",
              "status": "affected",
              "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ceph/auth.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.34"
            },
            {
              "lessThan": "2.6.34",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()\n\nIf a message of type CEPH_MSG_AUTH_REPLY contains a zero value for both\nprotocol and result, this is currently not treated as an error. In case\nof ac-\u003enegotiating == true and ac-\u003eprotocol \u003e 0, this leads to setting\nac-\u003eprotocol = 0 and ac-\u003eops = NULL. Thereafter, the check for\nac-\u003eprotocol != protocol returns false, and init_protocol() is not\ncalled. Subsequently, ac-\u003eops-\u003ehandle_reply() is called, which leads to\na null pointer dereference, because ac-\u003eops is still NULL.\n\nThis patch changes the check for ac-\u003eprotocol != protocol to\n!ac-\u003eprotocol, as this also includes the case when the protocol was set\nto zero in the message. This causes the message to be treated as\ncontaining a bad auth protocol."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable code processes a CEPH_MSG_AUTH_REPLY received from a remote Ceph monitor over TCP; the libceph client reaches monitors across routed networks, so the attacker (rogue monitor or MITM) operates remotely.\nAC:L - The attacker fully controls the reply message contents and sends protocol=0/result=0 during the negotiation it controls; the crash is deterministic with no race or unobservable memory-layout dependency.\nPR:N - The crafted reply is processed during the authentication handshake before the monitor\u0027s identity is verified, and a remote server/MITM needs no privileges on the victim client.\nUI:N - Once a CephFS/RBD client is connected, monitor connections and reconnections (and the negotiation state) occur automatically, so no user action is required at attack time.\nS:U - The crash occurs within the kernel itself with no crossing of a security boundary into another authority such as a hypervisor or other VM.\nC:N - A NULL pointer dereference yields no information disclosure; no attacker-controlled memory is read or leaked.\nI:N - The NULL dereference does not modify any kernel data and provides no write primitive.\nA:H - Dereferencing the NULL ac-\u003eops triggers a kernel oops/panic, crashing the system \u2014 a remote denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:29:11.187Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9ded62c302c0342efdb5eda3bf6e75720caad0df"
        },
        {
          "url": "https://git.kernel.org/stable/c/f101271fcf55d7eacfefd610b51ec65f46ba8118"
        },
        {
          "url": "https://git.kernel.org/stable/c/4b2738b93edad661178340239de657d876b73d3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/927e4bd5692f2a4901808822981fb2c8d4456548"
        },
        {
          "url": "https://git.kernel.org/stable/c/016bc663657366d386993f63eb31072eb45a2b77"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f2be7285941a33a9f72579a23b96392f83c758e"
        },
        {
          "url": "https://git.kernel.org/stable/c/5199c125d25aeae8615c4fc31652cc0fe624338e"
        }
      ],
      "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46024",
    "datePublished": "2026-05-27T12:56:29.932Z",
    "dateReserved": "2026-05-13T15:03:33.093Z",
    "dateUpdated": "2026-08-05T12:29:11.187Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46024",
      "date": "2026-09-30",
      "epss": "0.007",
      "percentile": "0.51361"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:46:07.000Z",
      "cve": "CVE-2026-46024",
      "id": "msrc_CVE-2026-46024",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46024.json",
      "version": "3"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/ceph/auth.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "9ded62c302c0342efdb5eda3bf6e75720caad0df",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f101271fcf55d7eacfefd610b51ec65f46ba8118",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4b2738b93edad661178340239de657d876b73d3d",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "927e4bd5692f2a4901808822981fb2c8d4456548",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "016bc663657366d386993f63eb31072eb45a2b77",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8f2be7285941a33a9f72579a23b96392f83c758e",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5199c125d25aeae8615c4fc31652cc0fe624338e",
                    "status": "affected",
                    "version": "4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/ceph/auth.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.6.34"
                  },
                  {
                    "lessThan": "2.6.34",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.209",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.175",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.140",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.86",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.27",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.0.*",
                    "status": "unaffected",
                    "version": "7.0.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66FEB83E-2D81-4BA1-B8BE-C61B1BC97290",
                    "versionEndExcluding": "5.15.209",
                    "versionStartIncluding": "2.6.34.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "92385813-D91D-480D-83A1-F423D2CBB2BA",
                    "versionEndExcluding": "6.1.175",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A1A92866-F406-43B5-B2D1-CFC274753E9D",
                    "versionEndExcluding": "6.6.140",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55DA1C62-9991-451E-B8A8-E0004E00F789",
                    "versionEndExcluding": "6.12.86",
                    "versionStartIncluding": "6.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A10AC84F-C058-47D5-85B4-E6E51A613B74",
                    "versionEndExcluding": "6.18.27",
                    "versionStartIncluding": "6.13",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3",
                    "versionEndExcluding": "7.0.4",
                    "versionStartIncluding": "6.19",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:-:*:*:*:*:*:*",
                    "matchCriteriaId": "A3B1BC1D-ED46-4364-A1D9-1FA74182B03A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "86D3F64C-3F27-43E0-B0D4-62CE1E1F4EFB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "7927713B-5EB0-41EB-86A9-9935775162E0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:rc4:*:*:*:*:*:*",
                    "matchCriteriaId": "59037296-3143-4FBB-AFF7-D4FE2C85502F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:rc5:*:*:*:*:*:*",
                    "matchCriteriaId": "9CA27FD5-7DBF-4C85-80A9-D523B2E4B033",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:rc6:*:*:*:*:*:*",
                    "matchCriteriaId": "9711E333-A8E7-4F4B-BCFD-2023E889651A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34:rc7:*:*:*:*:*:*",
                    "matchCriteriaId": "E04D3358-973B-42A1-8E08-2E3AE947193C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()\n\nIf a message of type CEPH_MSG_AUTH_REPLY contains a zero value for both\nprotocol and result, this is currently not treated as an error. In case\nof ac-\u003enegotiating == true and ac-\u003eprotocol \u003e 0, this leads to setting\nac-\u003eprotocol = 0 and ac-\u003eops = NULL. Thereafter, the check for\nac-\u003eprotocol != protocol returns false, and init_protocol() is not\ncalled. Subsequently, ac-\u003eops-\u003ehandle_reply() is called, which leads to\na null pointer dereference, because ac-\u003eops is still NULL.\n\nThis patch changes the check for ac-\u003eprotocol != protocol to\n!ac-\u003eprotocol, as this also includes the case when the protocol was set\nto zero in the message. This causes the message to be treated as\ncontaining a bad auth protocol."
          }
        ],
        "id": "CVE-2026-46024",
        "lastModified": "2026-06-17T10:52:55.147",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-05-27T14:17:20.890",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/016bc663657366d386993f63eb31072eb45a2b77"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/4b2738b93edad661178340239de657d876b73d3d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/5199c125d25aeae8615c4fc31652cc0fe624338e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/8f2be7285941a33a9f72579a23b96392f83c758e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/927e4bd5692f2a4901808822981fb2c8d4456548"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/9ded62c302c0342efdb5eda3bf6e75720caad0df"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/f101271fcf55d7eacfefd610b51ec65f46ba8118"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-476"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T21:31:05+00:00",
      "cve": "CVE-2026-46024",
      "id": "CVE-2026-46024",
      "initial_release_date": "2026-05-27T00:00:00+00:00",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46024.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:13:18Z",
      "cve": "CVE-2026-46024",
      "id": "CVE-2026-46024",
      "initial_release_date": "2026-05-28T03:54:11Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "645",
      "product_status:recommended": "306",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46024",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46024.json",
      "version": "25"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.