SECUFOCUSNOW
Home›CVE index›CVE-2026-46316
Review reviewCritical

CVE-2026-46316

Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase(). The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GI...

CVSS
9.3
EPSS
0.44%
36.3% percentile
CISA KEV
Not listed
Published
2026.06.09
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.44%
Technical severityCVSS 9.3

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each entry with vgic_put_irq(). It puts the iterated pointer, though, rather than the value returned by xa_erase(). The function is called from contexts that do not exclude one another: the ITS command handlers hold its_lock, the GITS_CTLR write path holds cmd_lock, and the path that clears EnableLPIs in a redistributor's GI...

Affected product and versions

Product
Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support
Affected versions
>= 8201d1028caa4fae88e222c4e8cf541fdf45b821 < b7b72e88046328c9fdc638fe887d4240257dd5dc, >= 8201d1028caa4fae88e222c4e8cf541fdf45b821 < 2bbc395e81bd29c543a0529a678327e932a7ec69, >= 8201d1028caa4fae88e222c4e8cf541fdf45b821 < 9121f4605ab94969f62d1b5714ca3c6c69bd202f, >= 8201d1028caa4fae88e222c4e8cf541fdf45b821 < 13031fb6b8357fbbcded2a7f4cba73e4781ee594, >= 6.10, >= 6.10 < 6.12.93, >= 6.13 < 6.18.35, >= 6.19 < 7.0.12, 7.1
Fixed versions
6.12.93, 6.18.35, 7.0.12

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE
CWE-911
CVE-2026-46316 — Linux Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support | SECUFOCUS NOW