vulnti.work

Linux Kernel: Linux Kernel Missing Initialization of a Variable Vulnerability

提示 CISA KEV 在册
CVECVE-2026-46300
首次发现2026-10-29 01:15 UTC
披露时间2026-10-28 00:00 UTC
最后更新2026-10-29 01:15 UTC
通道状态auto

摘要

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.

中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。

深度研判

该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。

受影响产品

  • Linux:Kernel

数据来源

  • CISA KEV DATABASE

原始链接

时间线

  1. kev_ingest CISA KEV