CVE-2026-46281

Description

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (need_realloc), the code allocates a new object of 'size' bytes and then memcpy()s 'old_size' bytes into it. If the request is to shrink the object (size < old_size), this results in an out-of-bounds write on the new buffer. Fix this by bounding the copy length by the new allocation size.

Description (MITRE) cveawg.mitre.org

Pulled from cveawg.mitre.org/api/cve/CVE-2026-46281 on 2026-10-31. Shown when MITRE's text differs from the cvelistV5 mirror.

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (need_realloc), the code allocates a new object of 'size' bytes and then memcpy()s 'old_size' bytes into it. If the request is to shrink the object (size < old_size), this results in an out-of-bounds write on the new buffer. Fix this by bounding the copy length by the new allocation size.

Overview

State

—

Assigner (CNA)

—

CVSS severity

high

CVSS score

7.8 / 10

CVSS vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Effective score

7.8 / 10 HIGH source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2026-46281

Linked Threat

CVE-2026-46281 — CVE-2026-46281

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2026-06-08 17:16:45 UTC

NVD last modified

2026-07-23 08:10:00 UTC

NVD CVSS v3.1

7.8 / 10 HIGH source: nvd@nist.gov

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

1.8 / 10

Impact subscore

5.9 / 10

EPSS score

0.0014 (probability of exploitation in next 30 days)

EPSS percentile

3.87% vs all CVEs — higher = more likely to be exploited, as of 2026-08-01

NVD-assigned CWE(s): CWE-787 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2026-35146

Assigner

Linux

Published

Jun 8, 2026, 3:41:24 PM

Updated

Jun 14, 2026, 6:06:05 PM

EUVD base score

0.0 / 10

EUVD-reported EPSS

0.1400

Vendors

Linux

Products

Linux (4c5d3365882dbbc0784688784904f440d7a4c0f1 <e9b057a44deff4c59c13f44672a5cc74dcd57522)

Linux (4c5d3365882dbbc0784688784904f440d7a4c0f1 <82d1f01292d3f09bf063f829f8ab8de12b4280a1)

Linux (patch: 7.0.4)

Linux (6.18)

Linux (patch: 6.18.27)

Linux (patch: 0)

Linux (4c5d3365882dbbc0784688784904f440d7a4c0f1 <b281adf71f786c325eb6d6d1582d4d05313438a8)

Linux (patch: 7.1)

Aliases

GHSA-xwpx-34xj-4qmq

ENISA description: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (need_realloc), the code allocates a new object of 'size' bytes and then memcpy()s 'old_size' bytes into it. If the request is to shrink the object (size < old_size), this results in an out-of-bounds write on the new buffer. Fix this by bounding the copy length by the new allocation size.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (5)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://git.kernel.org/stable/c/82d1f01292d3f09bf063f829f8ab8de12b4280a1 tenable:git.kernel.org
• https://git.kernel.org/stable/c/b281adf71f786c325eb6d6d1582d4d05313438a8 tenable:git.kernel.org
• https://git.kernel.org/stable/c/e9b057a44deff4c59c13f44672a5cc74dcd57522 tenable:git.kernel.org
• https://nvd.nist.gov/vuln/detail/CVE-2026-46281 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2026-46281 tenable:www.cve.org

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Microsoft®Update Catalog
  web:catalog.update.microsoft.com

  Welcome to the Microsoft Update Catalog site. We want your feedback! Visit our newsgroup or send us an email to provide us with your thoughts and suggestions. To get started using the site, enter in your search terms in the Search box above or visit our FAQ for search tips. |Newsgroup|Send us your feedback Accessibilité : partiellement conforme

  2026-06-19 02:38 UTC
• Game Update Notes: May 12, 2026 - Guild Wars 2 Forums
  web:en-forum.guildwars2.com

  05/12/2026—May 12 Release Notes Note to users of third-party programs: The game may not launch or work properly after we release a new build if you use a third-party program, due to possible incompatibilities. ArenaNet cannot offer support if a third-party modification breaks, interferes with, or ...

  2026-06-19 02:38 UTC
• Google Gemini
  web:gemini.google.com

  Get assistance with writing, planning, learning, and more from Google AI.

  2026-06-19 02:38 UTC
• MitigationPlanningPortal - FEMA
  web:hazards.fema.gov

  Access the FEMA Mitigation Planning Portal to manage and update your mitigation plans securely.

  2026-06-19 02:38 UTC
• Security Update Guide - Microsoft Security Response Center
  web:msrc.microsoft.com

  Security Update Guide - Microsoft Security Response Center

  2026-06-19 02:38 UTC
• u.jd.com
  web:u.jd.com

  u.jd.com

  2026-06-19 02:38 UTC
• WhatsApp
  web:wa.me

  Hosted by WhatsApp 2026 © WhatsApp LLC Privacy & Terms

  2026-06-19 02:38 UTC
• Dr. Marc Harrison, who championed deal to acquire Summa Health, is out ...
  web:www.beaconjournal.com

  Dr. Marc Harrison is stepping down as CEO of Health Assurance Transformation Company on July 31, ahead of the company's purchase of Summa Health.

  2026-06-19 02:38 UTC
• Grammarly: Free AI Writing Assistance
  web:www.grammarly.com

  Grammarly makes AI writing convenient. Work smarter with personalized AI guidance and text generation on any app or website.

  2026-06-19 02:38 UTC
• POV: We Tried To Fix His Car - YouTube
  web:www.youtube.com

  #shorts #minecraftmemes #minecraft If playback doesn't begin shortly, try restarting your device.

  2026-06-19 02:38 UTC

Only Available for Registered Users. Sign in to view.