Vulnerability in Linux
CVE-2026-46297
In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary handler but a NULL threaded handler, while also setting the IRQF_ONESHOT flag. This specific combination triggers a WARNING since the commit aef30c8d569c ("genirq: Warn about using IRQF_ONESHOT without a threaded handler"). WARNING: kernel/irq/manage.c:1502 at __setup_irq+0x4fa/0x760 Fix the issue by switching to request_irq(), which is the appropriate interface or a non-threaded interrupt handler, and removing the unnecessary IRQF_ONESHOT flag.
EPSS: 0.001 (1.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions eb4898fde1de8cf09f8a6b344dbd87536e0b1170, 6.17, 0
- Linux Linux_kernel — versions 7.1
References
Frequently asked questions
- What is CVE-2026-46297?
- CVE-2026-46297 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-06-08.
- How severe is CVE-2026-46297?
- Medium severity. CVSS v3 base score is 5.5 out of 10.