Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-46243

39
FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.

First published: Jun 1, 2026Last modified: Jun 14, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.24.1, < 5.10.258CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.209CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.175CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.142CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.92CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.38%
Probability of exploitation in next 30 days
EPSS Percentile
30.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0038 is in the 69th percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (93)

microsoftpatch availablevia msrc
Product: 21443-17084Fixed in: 6.6.143.1-1
microsoftpatch availablevia msrc
Product: 21443-17084Fixed in: 6.6.142.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.141.1-1 on Azure Linux 3.0Fixed in: 6.6.143.1-1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1060.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1057.58~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1058.64
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1045.48
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1058.61.1
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (resolute)Fixed in: 7.0.0-1014.14
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.17 (noble)Fixed in: 6.17.0-1017.19~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (questing)Fixed in: 6.17.0-1017.19
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.17 (noble)Fixed in: 6.17.0-1019.19~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.17 (noble)Fixed in: 6.17.0-1020.22~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.17 (noble)Fixed in: 6.17.0-1018.18~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (questing)Fixed in: 6.17.0-1019.19
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (questing)Fixed in: 6.17.0-1020.22
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (questing)Fixed in: 6.17.0-1018.18
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-5.15 (focal)Fixed in: 5.15.0-1111.118~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-5.15 (focal)Fixed in: 5.15.0-1116.125~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-5.15 (focal)Fixed in: 5.15.0-1116.125~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-185.195~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-5.15 (focal)Fixed in: 5.15.0-1105.109~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-183.193~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1063.63~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (jammy)Fixed in: 5.15.0-185.195
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (jammy)Fixed in: 5.15.0-1111.118
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (jammy)Fixed in: 5.15.0-1111.118+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (jammy)Fixed in: 5.15.0-1116.125
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (jammy)Fixed in: 5.15.0-185.195+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (jammy)Fixed in: 5.15.0-1111.121
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1111.121+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (jammy)Fixed in: 5.15.0-1107.113
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (jammy)Fixed in: 5.15.0-1094.102
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (jammy)Fixed in: 5.15.0-1105.109
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iot-realtime (jammy)Fixed in: 5.15.0-1103.105
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg (jammy)Fixed in: 5.15.0-1106.112
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (jammy)Fixed in: 5.15.0-1103.108
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (jammy)Fixed in: 5.15.0-183.193
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (jammy)Fixed in: 5.15.0-1106.107
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (jammy)Fixed in: 5.15.0-1063.63
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-igx (jammy)Fixed in: 5.15.0-1052.52
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (jammy)Fixed in: 5.15.0-1108.114
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (jammy)Fixed in: 5.15.0-1110.119
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1058.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1055.56~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-134.134
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1060.63
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (noble)Fixed in: 6.8.0-1060.63+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1063.69
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1063.69+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (noble)Fixed in: 6.8.0-1060.61
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1057.58
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1055.56
ubuntupatch availablevia ubuntu_usn
Product: linux (resolute)Fixed in: 7.0.0-27.27
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (resolute)Fixed in: 7.0.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (resolute)Fixed in: 7.0.0-1007.7
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (resolute)Fixed in: 7.0.0-1009.9
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (resolute)Fixed in: 7.0.0-1007.7
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (resolute)Fixed in: 7.0.0-27.27.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-6.17 (noble)Fixed in: 6.17.0-1028.28
ubuntupatch availablevia ubuntu_usn
Product: linux (questing)Fixed in: 6.17.0-40.40
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-7.0 (resolute)Fixed in: 7.0.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux (trusty)Fixed in: 3.13.0-214.265
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-5.15 (focal)Fixed in: 5.15.0-1108.114~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1032.33
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (noble)Fixed in: 6.8.0-1029.30
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-134.134.1~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-134.134.1
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2049.50
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (bionic)Fixed in: 4.15.0-1194.207
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (bionic)Fixed in: 4.15.0-2132.138
ubuntupatch availablevia ubuntu_usn
Product: linux (bionic)Fixed in: 4.15.0-253.265
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-4.15 (bionic)Fixed in: 4.15.0-1204.219
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (bionic)Fixed in: 4.15.0-2112.118
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (bionic)Fixed in: 4.15.0-1149.161
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-4.15 (bionic)Fixed in: 4.15.0-1187.204
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (bionic)Fixed in: 4.15.0-2095.101
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (bionic)Fixed in: 4.15.0-1176.181
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (bionic)Fixed in: 4.15.0-1156.167
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1074.78
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (jammy)Fixed in: 5.15.0-1105.108
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1062.69+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-134.134+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-6.17 (noble)Fixed in: 6.17.0-40.40~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (trusty)Fixed in: 4.4.0-1156.162
ubuntupatch availablevia ubuntu_usn
Product: linux-lts-xenial (trusty)Fixed in: 4.4.0-283.317~14.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (xenial)Fixed in: 4.4.0-1126.133
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-5.15 (focal)Fixed in: 5.15.0-1111.121~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-7.0 (noble)Fixed in: 7.0.0-28.28~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg-5.15 (focal)Fixed in: 5.15.0-1106.112~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.8 (jammy)Fixed in: 6.8.0-1060.63~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1063.69~22.04.1

Vendor Advisories (25)

ubuntuUSN-8569-1

Linux kernel (HWE) vulnerabilities

Jul 20, 2026
ubuntuUSN-8490-2

Linux kernel (Real-time) vulnerabilities

Jul 17, 2026
ubuntuUSN-8548-1

Linux kernel vulnerabilities

Jul 15, 2026
ubuntuUSN-8547-1

Linux kernel vulnerabilities

Jul 15, 2026
ubuntuUSN-8545-1

Linux kernel (HWE) vulnerabilities

Jul 15, 2026
ubuntuUSN-8530-1

Linux kernel (AWS) vulnerabilities

Jul 10, 2026
ubuntuUSN-8529-1

Linux kernel vulnerabilities

Jul 10, 2026
ubuntuUSN-8528-1

Linux kernel (Xilinx ZynqMP) vulnerabilities

Jul 10, 2026
ubuntuUSN-8527-1

Linux kernel (Raspberry Pi) vulnerabilities

Jul 10, 2026
ubuntuUSN-8492-5

Linux kernel (FIPS) vulnerabilities

Jul 10, 2026
ubuntuUSN-8492-3

Linux kernel (Raspberry Pi Real-time) vulnerabilities

Jul 6, 2026
ubuntuUSN-8501-1

Linux kernel vulnerabilities

Jul 2, 2026
ubuntuUSN-8493-2

Linux kernel (Oracle) vulnerabilities

Jul 2, 2026
ubuntuUSN-8499-1

Linux kernel (Xilinx) vulnerabilities

Jul 2, 2026
ubuntuUSN-8498-1

Linux kernel (NVIDIA Tegra) vulnerabilities

Jul 2, 2026
ubuntuUSN-8497-1

Linux kernel (Low Latency) vulnerabilities

Jul 2, 2026
ubuntuUSN-8492-2

Linux kernel vulnerabilities

Jul 2, 2026
ubuntuUSN-8488-2

Linux kernel (Raspberry Pi) vulnerabilities

Jul 2, 2026
ubuntuUSN-8493-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8492-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8488-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8491-1

Linux kernel (OEM) vulnerabilities

Jul 1, 2026
ubuntuUSN-8490-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8489-1

Linux kernel (OEM) vulnerabilities

Jul 1, 2026
microsoft2026-Jun/CVE-2026-46243Important

smb: client: reject userspace cifs.spnego descriptions

Jun 4, 2026

References

access.redhat.com / errata/RHSA-2026:23258
access.redhat.com / errata/RHSA-2026:23259
access.redhat.com / errata/RHSA-2026:23329
access.redhat.com / errata/RHSA-2026:23395
access.redhat.com / errata/RHSA-2026:24381
access.redhat.com / errata/RHSA-2026:25908
access.redhat.com / errata/RHSA-2026:26462
access.redhat.com / errata/RHSA-2026:26515
access.redhat.com / errata/RHSA-2026:26535
access.redhat.com / errata/RHSA-2026:26563
access.redhat.com / errata/RHSA-2026:26570
access.redhat.com / errata/RHSA-2026:27708
access.redhat.com / errata/RHSA-2026:27719
access.redhat.com / errata/RHSA-2026:27729
access.redhat.com / errata/RHSA-2026:27735
access.redhat.com / errata/RHSA-2026:28887
access.redhat.com / errata/RHSA-2026:28962
access.redhat.com / errata/RHSA-2026:33219
access.redhat.com / errata/RHSA-2026:33220
access.redhat.com / errata/RHSA-2026:33221
access.redhat.com / errata/RHSA-2026:33222
access.redhat.com / errata/RHSA-2026:33223
access.redhat.com / errata/RHSA-2026:33224
access.redhat.com / errata/RHSA-2026:33225
access.redhat.com / errata/RHSA-2026:33486
access.redhat.com / errata/RHSA-2026:34048
access.redhat.com / errata/RHSA-2026:34757
access.redhat.com / errata/RHSA-2026:34764
access.redhat.com / errata/RHSA-2026:34788
access.redhat.com / errata/RHSA-2026:34815
access.redhat.com / errata/RHSA-2026:36620
access.redhat.com / errata/RHSA-2026:40021
access.redhat.com / errata/RHSA-2026:41236
access.redhat.com / security/cve/CVE-2026-46243
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-46243.json
github.com / manizada/CIFSwitch
Third Party Advisory
git.kernel.org / stable/c/0aece6685fc80a8de492688ca2315fb86ec379c7
Patch
git.kernel.org / stable/c/2035acfb17221729b1b8ac335e941868a04ca079
Patch
git.kernel.org / stable/c/3da1fdf4efbc490041eb4f836bf596201203f8f2
Patch
git.kernel.org / stable/c/7713bd320ed4fc3d08a227cd8e41242219a16981
Patch
git.kernel.org / stable/c/91f89c1d83e80417629791fcef6af8140d7d01c8
Patch
git.kernel.org / stable/c/9544559e59438a4b609b2fdfa0763d8360572824
Patch
git.kernel.org / stable/c/a3bbda6502a9398b816fa2e71c9a3f955f58013d
Patch
git.kernel.org / stable/c/cf20038657d6d4974349556a34e08fe0490bebbc
Patch
openwall.com / lists/oss-security/2026/06/01/6
Mailing ListThird Party Advisory