GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46102 (GCVE-0-2026-46102)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:59 – Updated: 2026-08-05 12:29
VLAI
Title
net: strparser: fix skb_head leak in strp_abort_strp()
Summary
In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < d6668ce0e78d23eabecef9a6bc4f0f739cb28ad3 (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < a470ed71c906cc8cbad0d74c9942216698911f8b (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < c2e57695ec9ff9d42f23de70f3805199153d007b (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < e9ae00490d474757c0f9c65073de83e6bb1e5a00 (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < 5327dad2ffe9c1b49881dd6d51ff3c6893847568 (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < 19ca9475f18f991735f98a22e735c43e95e6298d (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < 56082f442023db9be1a5a29d4ee361de4017c0b7 (git)
Affected: 43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a , < fe72340daaf1af588be88056faf98965f39e6032 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.9
Unaffected: 0 , < 4.9 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.86 , ≤ 6.12.* (semver)
Unaffected: 6.18.27 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/strparser/strparser.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d6668ce0e78d23eabecef9a6bc4f0f739cb28ad3",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "a470ed71c906cc8cbad0d74c9942216698911f8b",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "c2e57695ec9ff9d42f23de70f3805199153d007b",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "e9ae00490d474757c0f9c65073de83e6bb1e5a00",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "5327dad2ffe9c1b49881dd6d51ff3c6893847568",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "19ca9475f18f991735f98a22e735c43e95e6298d",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "56082f442023db9be1a5a29d4ee361de4017c0b7",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            },
            {
              "lessThan": "fe72340daaf1af588be88056faf98965f39e6032",
              "status": "affected",
              "version": "43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/strparser/strparser.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "lessThan": "4.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: strparser: fix skb_head leak in strp_abort_strp()\n\nWhen the stream parser is aborted, for example after a message assembly timeout,\nit can still hold a reference to a partially assembled message in\nstrp-\u003eskb_head.\n\nThat skb is not released in strp_abort_strp(), which leaks the partially\nassembled message and can be triggered repeatedly to exhaust memory.\n\nFix this by freeing strp-\u003eskb_head and resetting the parser state in the\nabort path. Leave strp_stop() unchanged so final cleanup still happens in\nstrp_done() after the work and timer have been synchronized."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The strparser parses data received from a remote TCP peer (espintcp ESP-in-TCP framing, sockmap framed protocols); the leak is driven by a remote peer sending a partial length-prefixed frame that never completes.\nAC:L - The attacker reliably sends an incomplete framed message and simply lets the message-assembly timer expire; this trigger is fully under the attacker\u0027s control.\nPR:N - The framing parse (length-prefix read) occurs at the stream layer before any authentication of the payload, so a remote peer needs no privileges on the target to send partial frames and trigger the leak.\nUI:N - No victim interaction is required; the leak is triggered solely by the attacker\u0027s network data and the timeout firing.\nS:U - The leaked skb is kernel memory within the same security authority; no security boundary is crossed.\nC:N - The leaked partial-message skb is orphaned, not exposed to the attacker; the bug discloses no information.\nI:N - Nothing is overwritten or modified; the parser is stopped and the dangling pointer is never reused, so there is no integrity impact.\nA:H - Each abort leaks a partial message (up to sk_rcvbuf) and the commit notes it can be triggered repeatedly to exhaust memory, leading to kernel-wide memory exhaustion / OOM denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:29:38.661Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d6668ce0e78d23eabecef9a6bc4f0f739cb28ad3"
        },
        {
          "url": "https://git.kernel.org/stable/c/a470ed71c906cc8cbad0d74c9942216698911f8b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c2e57695ec9ff9d42f23de70f3805199153d007b"
        },
        {
          "url": "https://git.kernel.org/stable/c/e9ae00490d474757c0f9c65073de83e6bb1e5a00"
        },
        {
          "url": "https://git.kernel.org/stable/c/5327dad2ffe9c1b49881dd6d51ff3c6893847568"
        },
        {
          "url": "https://git.kernel.org/stable/c/19ca9475f18f991735f98a22e735c43e95e6298d"
        },
        {
          "url": "https://git.kernel.org/stable/c/56082f442023db9be1a5a29d4ee361de4017c0b7"
        },
        {
          "url": "https://git.kernel.org/stable/c/fe72340daaf1af588be88056faf98965f39e6032"
        }
      ],
      "title": "net: strparser: fix skb_head leak in strp_abort_strp()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46102",
    "datePublished": "2026-05-27T12:59:09.526Z",
    "dateReserved": "2026-05-13T15:03:33.097Z",
    "dateUpdated": "2026-08-05T12:29:38.661Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46102",
      "date": "2026-09-16",
      "epss": "0.00501",
      "percentile": "0.41677"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:46:58.000Z",
      "cve": "CVE-2026-46102",
      "id": "msrc_CVE-2026-46102",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "net: strparser: fix skb_head leak in strp_abort_strp()",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46102.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46102\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-27T14:17:32.323\",\"lastModified\":\"2026-06-25T21:18:22.100\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: strparser: fix skb_head leak in strp_abort_strp()\\n\\nWhen the stream parser is aborted, for example after a message assembly timeout,\\nit can still hold a reference to a partially assembled message in\\nstrp-\u003eskb_head.\\n\\nThat skb is not released in strp_abort_strp(), which leaks the partially\\nassembled message and can be triggered repeatedly to exhaust memory.\\n\\nFix this by freeing strp-\u003eskb_head and resetting the parser state in the\\nabort path. Leave strp_stop() unchanged so final cleanup still happens in\\nstrp_done() after the work and timer have been synchronized.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/strparser/strparser.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"d6668ce0e78d23eabecef9a6bc4f0f739cb28ad3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"a470ed71c906cc8cbad0d74c9942216698911f8b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"c2e57695ec9ff9d42f23de70f3805199153d007b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"e9ae00490d474757c0f9c65073de83e6bb1e5a00\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"5327dad2ffe9c1b49881dd6d51ff3c6893847568\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"19ca9475f18f991735f98a22e735c43e95e6298d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"56082f442023db9be1a5a29d4ee361de4017c0b7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"43a0c6751a322847cb6fa0ab8cbf77a1d08bfc0a\",\"lessThan\":\"fe72340daaf1af588be88056faf98965f39e6032\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/strparser/strparser.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.9\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.9\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.86\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.27\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.4\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"C4A199C3-CD5F-4853-A2B5-C26E88E57A7E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"A1A92866-F406-43B5-B2D1-CFC274753E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.86\",\"matchCriteriaId\":\"55DA1C62-9991-451E-B8A8-E0004E00F789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.27\",\"matchCriteriaId\":\"A10AC84F-C058-47D5-85B4-E6E51A613B74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.4\",\"matchCriteriaId\":\"CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/19ca9475f18f991735f98a22e735c43e95e6298d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5327dad2ffe9c1b49881dd6d51ff3c6893847568\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/56082f442023db9be1a5a29d4ee361de4017c0b7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a470ed71c906cc8cbad0d74c9942216698911f8b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c2e57695ec9ff9d42f23de70f3805199153d007b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d6668ce0e78d23eabecef9a6bc4f0f739cb28ad3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e9ae00490d474757c0f9c65073de83e6bb1e5a00\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fe72340daaf1af588be88056faf98965f39e6032\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T19:16:43+00:00",
      "cve": "CVE-2026-46102",
      "id": "CVE-2026-46102",
      "initial_release_date": "2026-05-27T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: strparser: fix skb_head leak in strp_abort_strp()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46102.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:12:30Z",
      "cve": "CVE-2026-46102",
      "id": "CVE-2026-46102",
      "initial_release_date": "2026-05-28T03:52:36Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "643",
      "product_status:known_not_affected": "6",
      "product_status:recommended": "277",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46102",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46102.json",
      "version": "17"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.