CVE-2026-46234
highpriority · track · 31EPSS 0.001 · 3 %ileDEEUFRRUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer size was being clamped to the maximum first, and then to the minimum. If a user sets a minimum buffer size larger than the maximum, the minimum check overrides the maximum check, inverting the constraint. This breaks the intended socket memory boundaries by allowing the vsk->buffer_size to grow beyond the configured vsk->buffer_max_size. Fix this by checking the minimum first, and then the maximum. This ensures the buffer size never exceeds the buffer_max_size.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Currently no fix is available
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · none–high · 0–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (66)
Products and version ranges known to be affected.
- Red Hat Enterprise Linux 7 Extended Lifecycle Supportall versionscert_bundDEcpe:/o:redhat:enterprise_linux:7_extended_lifecycle_support
advisories (4)
Vendor and ecosystem advisories describing this.
- SSA-784472SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.12026-10-13csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
- WID-SEC-W-2026-1700Linux Kernel: Mehrere SchwachstellenDeutsch2026-05-27csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht näher spezifizierte Auswirkungen zu erzielen.
- ICSA-26-295-16Siemens SIMATIC S7-1500 TM MFP2026-10-13icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
- CERTFR-2026-AVI-1298Multiples vulnérabilités dans les produits SiemensFrançais2026-10-13vendor · certfrFR
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (22)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/0b68881501460c3761f196469e1e503218c5e536cnnvd
- https://git.kernel.org/stable/c/2602f7bb5818e92315feeaeb71d8ce4d5c9ab160cnnvd
- https://git.kernel.org/stable/c/310da27932dd0afe7ce7456dfe1f0814c3301f41cnnvd
- https://git.kernel.org/stable/c/a998a7e250bf976539e05a00ec64a81292afecaacnnvd
- https://git.kernel.org/stable/c/d114bfdc9b76bf93b881e195b7ec957c14227babcnnvd
- https://www.kernel.org/Patchcnnvd
- https://git.kernel.org/stable/c/01ef69785dc3162f588a361ab770b1e312800188enisa_euvd
- https://git.kernel.org/stable/c/0b68881501460c3761f196469e1e503218c5e536enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan