Vulnerability in Linux
CVE-2026-46260
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node(). syzbot reported out-of-bound read in fib6_add_rt2node(). [0] When IPv6 route is created with RTA_NH_ID, struct fib6…
EPSS: 0.000 (5.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 50b7c7a255858a85c4636a1e990ca04591153dca, d8143c54ceeba232dc8a13aa0afa14a44b371d93, b8ad2d53f706aeea833d23d45c0758398fede580
References
Frequently asked questions
- What is CVE-2026-46260?
- CVE-2026-46260 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-06-03.
- How severe is CVE-2026-46260?
- High severity. CVSS v3 base score is 7.8 out of 10.