CVE Explorer

CVE-2026-46289

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in extract_iter_to_sg()", v3. Fix bugs in the kvec and user variants of extract_iter_to_sg. This series is growing due to useful remarks made by sashiko.dev. The main bugs are: - The length for an sglist entry when extracting from a kvec can exceed the number of bytes in the page. This is obviously not intended. - When extracting a use

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:479b4fc821c09881c38eba36e71383d0b9beee9f7de9c2f1c451b98aeedb86c0

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["lib/scatterlist.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.88","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.30","versionType":"semver"},{"lessThanOrEqual…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["lib/scatterlist.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3f17500e86d730c76db638bb3ae52f9b5e496c76","status":"affected","version":"0185846975339a5c348373aa450a977f5242366b","versionType":"git"},{"lessThan":"e5e22fc9963469e678c4f4bb38d26adcec107f1e","status":"affected","version":"0185846975339a5c348373aa450a977f5242366b","versionType":"git"},{"lessThan":"8fbba6829057979149d1b37d65690c037f3ddf4d","status":"affected","version":"0185846975339a5c348373aa450a…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/07b7d66e65d9cfe6b9c2c34aa22cfcaac37a5c45"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/3f17500e86d730c76db638bb3ae52f9b5e496c76"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/8fbba6829057979149d1b37d65690c037f3ddf4d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/9d38756d0a93b66163554219fa9c3365f40c4035"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/e5e22fc9963469e678c4f4bb38d26adcec107f1e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a12492f62091f57850b2197305562a2652848f70cfc6e7e0fb2e581ae147716 · sha256:a0b1c2d31c456992… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer