In the Linux kernel, the following vulnerability has been resolved:
net/sched: fix pedit partial COW leading to page cache corruption
tcf_pedit_act() computes the COW range for skb_ensure_writable()
once before the key loop using tcfp_off_max_hint, but the hint does
not account for the runtime header offset added by typed keys. This
can leave part of the write region un-COW'd.
Fix by moving skb_ensure_writable() inside the per-key loop where
the actual write offset is known, and add overflow checking on the
offset arithmetic. For negative offsets (e.g. Ethernet header edits
at ingress), use skb_cow() to COW the headroom instead. Guard
offset_valid() against INT_MIN, where negation is undefined.
References
Configurations
Configuration 1 (hide)
|
History
23 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2026, 16:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.18:rc7:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/2bec122b9fb91507a758ab5e3e5c4fbe7cb3f61b - Patch | |
| References | () https://git.kernel.org/stable/c/3dee9d0c198faeb95d052c1b94c2958751a28512 - Patch | |
| References | () https://git.kernel.org/stable/c/544d857b42a1734b923040e13aa61a6fd4746cf2 - Patch | |
| References | () https://git.kernel.org/stable/c/899ee91156e57784090c5565e4f31bd7dbffbc5a - Patch | |
| References | () https://git.kernel.org/stable/c/a071e057518decc5e3bec89855758f5f8786f2c5 - Patch | |
| References | () https://git.kernel.org/stable/c/b198ed4e52580a7238c7c7082f03906f8b310313 - Patch | |
| References | () https://git.kernel.org/stable/c/b685d6ef6f07a3b5ce814565a25f39f2157538a5 - Patch | |
| References | () https://git.kernel.org/stable/c/d5d01d35a5a7d36f7cb679b67d9cbdd5205672dc - Patch | |
| References | () https://access.redhat.com/errata/RHSA-2026:27288 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27353 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27354 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27355 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27704 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27705 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27706 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27707 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27708 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27709 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27713 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27731 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:27789 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:28887 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:28962 - Issue Tracking | |
| References | () https://access.redhat.com/errata/RHSA-2026:29080 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29794 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29799 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29833 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29856 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:29863 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33219 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33220 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33221 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33222 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33223 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33224 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33225 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:33666 - Third Party Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2026-46331 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2479492 - Third Party Advisory | |
| References | () https://github.com/sgkdev/packet_edit_meme/tree/main - Third Party Advisory | |
| References | () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46331.json - Third Party Advisory |
07 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 05:19
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jun 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | CWE-787 CWE-190 |
28 Jun 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
19 Jun 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jun 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-16 08:16
Updated : 2026-07-23 12:18
NVD link : CVE-2026-46331
Mitre link : CVE-2026-46331
CVE.ORG link : CVE-2026-46331
JSON object : View
Products Affected
linux
- linux_kernel
