CVE-2026-46333

Adatlap

CVE: CVE-2026-46333
EUVD: EUVD-2026-30540
GHSA: GHSA-pm8f-4p6p-6x53
Eszköztípus: IT +ICS
Publikálva: 2026. 05. 15. 14:58
Frissítve: 2026. 11. 10. 13:47
Súlyosság: Magas
Prioritás: Kiemelt
CWE: CWE-269

CVSS-pontszámok

Verzió	Pontszám	Súlyosság	Vektor
3.1	7,1	Magas	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N`
3.1	7,8	Magas	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Eredeti leírás

In the Linux kernel, the following vulnerability has been resolved:

ptrace: slightly saner 'get_dumpable()' logic

The 'dumpability' of a task is fundamentally about the memory image of
the task - the concept comes from whether it can core dump or not - and
makes no sense when you don't have an associated mm.

And almost all users do in fact use it only for the case where the task
has a mm pointer.

But we have one odd special case: ptrace_may_access() uses 'dumpable' to
check various other things entirely independently of the MM (typically
explicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for
threads that no longer have a VM (and maybe never did, like most kernel
threads).

It's not what this flag was designed for, but it is what it is.

The ptrace code does check that the uid/gid matches, so you do have to
be uid-0 to see kernel thread details, but this means that the
traditional "drop capabilities" model doesn't make any difference for
this all.

Make it all make a *bit* more sense by saying that if you don't have a
MM pointer, we'll use a cached "last dumpability" flag if the thread
ever had a MM (it will be zero for kernel threads since it is never
set), and require a proper CAP_SYS_PTRACE capability to override.

Érintett termékek

Linux Linux Verziók: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 – < 93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6; bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 – < 15b828a46f305ae9f05a7c16914b3ce273474205; bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 – < 4709234fd1b95136ceb789f639b1e7ea5de1, 4.10; 0 – < 4.10; 5.10.256 – <= 5.10.*; 5.15.207 – <= 5.15.*; 6.1.173 – <= 6.1.*; 6.6.139 – <= 6.6.*; 6.12.89 – <= 6.12.*; 6.18.31 – <= 6.18.*; 7.0.8 – <= 7.0.*; 7.1 – <= *

Beszállítói termékekben is érintett

A CVE-rekord beszállítói kiegészítése szerint ezek a termékek beépítve tartalmazzák az érintett komponenst.

A beszállítói termékek megjelenítése (26 tétel)

NVIDIA for RHEL 10 Red Hat Verziók: 0:6.12.0-211.8.el10nv – < *; 0:6.12.0-231.12.el10nv – < *
Red Hat Enterprise Linux 10 Red Hat Verziók: 0:6.12.0-211.16.1.el10_2 – < *
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Verziók: 0:6.12.0-55.75.1.el10_0 – < *
Red Hat Enterprise Linux 8 Red Hat Verziók: 0:4.18.0-553.125.1.rt7.466.el8_10 – < *, 0:4.18.0-553.125.1.el8_10 – < *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Verziók: 0:4.18.0-305.192.1.el8_4 – < *
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat Verziók: 0:4.18.0-305.192.1.el8_4 – < *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Verziók: 0:4.18.0-372.193.1.el8_6 – < *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat Verziók: 0:4.18.0-372.193.1.el8_6 – < *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Verziók: 0:4.18.0-372.193.1.el8_6 – < *
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Verziók: 0:4.18.0-477.143.1.el8_8 – < *
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Verziók: 0:4.18.0-477.143.1.el8_8 – < *
Red Hat Enterprise Linux 9 Red Hat Verziók: 0:5.14.0-687.10.1.el9_8 – < *
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat Verziók: 0:5.14.0-70.180.1.el9_0 – < *, 0:5.14.0-70.180.1.rt21.252.el9_0 – < *
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Verziók: 0:5.14.0-284.172.1.el9_2 – < *, 0:5.14.0-284.172.1.rt14.457.el9_2 – < *
Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat Verziók: 0:5.14.0-427.126.1.el9_4 – < *
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Verziók: 0:5.14.0-570.116.1.el9_6 – < *
Red Hat OpenShift Container Platform 4.20 Red Hat Verziók: 0:1.33.12-3.rhaos4.20.git64c6a00.el9 – < *, 0:5.14.0-570.117.1.el9_6 – < *, 0:4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8 – < *, 0:4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8 – < *, 4.20.9.6.202605270908-0 – < *
Red Hat Enterprise Linux 6 Red Hat
Red Hat Enterprise Linux 7 Red Hat
Red Hat OpenShift Container Platform 4 Red Hat
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) Siemens Verziók: V3.1.6 – < *, V3.1.7 – < *
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) Siemens Verziók: V3.1.6 – < *, V3.1.7 – < *
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) Siemens Verziók: V3.1.6 – < *, V3.1.7 – < *
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) Siemens Verziók: V3.1.6 – < *, V3.1.7 – < *
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) Siemens Verziók: V3.1.6 – < *, V3.1.7 – < *

Prioritás

Szint: Kiemelt
Teendő: Soron kívüli intézkedés javasolt: a szoftvert 72 órán belül frissítse. A javításig kísérje figyelemmel a sérülékenység kihasználására utaló jeleket, és ha elérhető, alkalmazza a gyártó által javasolt kerülő megoldást.

Kihasználási státusz

EPSS: 4,30%
Kihasználtság: PoC
Automatizálhatóság: Nem
Technikai hatás: Teljes

Javítás

Javított verzió: 3.17, 4.5, 4.9, 4.10, 5.10.256, 5.15.207, 6.1.173, 6.6.139, 6.12.89, 6.18.31, 7.0.8, 7.1, 0:6.12.0-211.8.el10nv, 0:6.12.0-231.12.el10nv, 0:6.12.0-211.16.1.el10_2, 0:6.12.0-55.75.1.el10_0, 0:4.18.0-553.125.1.rt7.466.el8_10, 0:4.18.0-553.125.1.el8_10, 0:4.18.0-305.192.1.el8_4, 0:4.18.0-372.193.1.el8_6

+13 további
0:4.18.0-477.143.1.el8_8, 0:5.14.0-687.10.1.el9_8, 0:5.14.0-70.180.1.el9_0, 0:5.14.0-70.180.1.rt21.252.el9_0, 0:5.14.0-284.172.1.el9_2, 0:5.14.0-284.172.1.rt14.457.el9_2, 0:5.14.0-427.126.1.el9_4, 0:5.14.0-570.116.1.el9_6, 0:1.33.12-3.rhaos4.20.git64c6a00.el9, 0:5.14.0-570.117.1.el9_6, 0:4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8, 0:4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8, 4.20.9.6.202605270908-0
Gyártói hivatkozás: Van patch vagy gyártói közlemény a hivatkozások között

Megoldás (CNA)

RHSA-2026:19540: NVIDIA for RHEL 10

RHSA-2026:33486: NVIDIA for RHEL 10

RHSA-2026:21701: Red Hat OpenShift Container Platform 4.20

RHSA-2026:21702: Red Hat OpenShift Container Platform 4.20

RHSA-2026:20299: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)

RHSA-2026:19569: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:19705: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)

RHSA-2026:20593: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:20054: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)

RHSA-2026:20129: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)

RHSA-2026:19568: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:19666: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)

RHSA-2026:23470: Red Hat Enterprise Linux BaseOS (v. 8)

RHSA-2026:20130: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)

RHSA-2026:20051: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)

RHSA-2026:19521: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)

RHSA-2026:23471: Red Hat Enterprise Linux BaseOS E4S (v.8.8)

RHSA-2026:23469: Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:24814: Red Hat Enterprise Linux BaseOS E4S (v.9.4)

RHSA-2026:23468: Red Hat Enterprise Linux BaseOS EUS (v.9.6)

RHSA-2026:19664: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)

RHSA-2026:19711: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)

RHSA-2026:19875: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)

Kerülő megoldás (CNA)

See the security bulletin for a detailed mitigation procedure.