CVE-2026-46185
criticalpriority · track · 0EPSS 0.005 · 44 %ileDEEUFRUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlink_data() Since smb2_check_message() returns success without length validation for the symlink error response, in symlink_data() it is possible for iov->iov_len to be smaller than sizeof(struct smb2_err_rsp). If the buffer only contains the base SMB2 header (64 bytes), accessing err->ErrorContextCount (at offset 66) or err->ByteCount later in symlink_data() will cause an out-of-bounds read.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Currently no fix is available
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.3–9.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (44)
Products and version ranges known to be affected.
- Red Hat Enterprise Linux 7 Extended Lifecycle Supportall versionscert_bundDEcpe:/o:redhat:enterprise_linux:7_extended_lifecycle_support
advisories (4)
Vendor and ecosystem advisories describing this.
- SSA-784472SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.12026-10-13csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
- WID-SEC-W-2026-1700Linux Kernel: Mehrere SchwachstellenDeutsch2026-05-27csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht näher spezifizierte Auswirkungen zu erzielen.
- ICSA-26-295-16Siemens SIMATIC S7-1500 TM MFP2026-10-13icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
- CERTFR-2026-AVI-1298Multiples vulnérabilités dans les produits SiemensFrançais2026-10-13vendor · certfrFR
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (19)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/15dc0a4de743a1aaa7b859b3aea79f08c695396ccnnvd
- https://git.kernel.org/stable/c/b8c8a704f0bc133deb171f6aeb6f3a684203e212cnnvd
- https://git.kernel.org/stable/c/b9561402489d41149f63e001a74384863b7b30a6cnnvd
- https://git.kernel.org/stable/c/d62b8d236fab503c6fec1d3e9a38bea71feaca20cnnvd
- https://git.kernel.org/stable/c/ef6495d4df6e7af8f3de67e65150881c880f696ccnnvd
- https://www.kernel.org/Patchcnnvd
- https://git.kernel.org/stable/c/15dc0a4de743a1aaa7b859b3aea79f08c695396cenisa_euvd
- https://git.kernel.org/stable/c/2be11faf79e49fb8250a181ff0b4d2b2f084af83enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan