CVE-2026-46300

CVEs › CVE-2026-46300

Description

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 7.8 / 10
CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Effective score: 7.8 / 10 HIGH source: CNA overview
MSRC score: 7.8 / 10 HIGH MS rating: Important
CWE(s): CWE-787
Reserved: 2026-05-13
Published: 2026-05-23 11:44 UTC
Last updated: 2026-05-23 13:20 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/46xxx/CVE-2026-46300.json
Linked Threat: CVE-2026-46300 — CVE-2026-46300

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

EPSS score: 0.0007 (probability of exploitation in next 30 days)
EPSS percentile: 20.64% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD / KEV / EPSS data refreshed 2026-05-25 00:20 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-31535
Assigner: Linux
Published: May 23, 2026, 11:44:02 AM
Updated: May 30, 2026, 10:49:36 AM
EUVD base score (CVSS 3.1): 7.8 / 10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EUVD-reported EPSS: 0.2500
Vendors: Linux
Products: Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <f84eca5817390257cef78013d0112481c503b4a3)

Linux (patch: 7.1-rc5)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <9bc9d6d6967a2239aa57af2aa53554eddd640d20)

Linux (patch: 6.18.33)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <78bf6b6bb19541d19fbda6242e7cfe2c682763c0)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <fc6eb39c55e97df2f94ad974b8a5bbcd019da2c8)

Linux (patch: 0)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <12401fcfb01f53ccc63ab0a3246570fe8f3105ee)

Linux (patch: 6.1.174)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <989214c66884d70716d83dc1d0bf5e16287bf349)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <9d3e5fd19fe1063bf607219e8562fbd567b8e8d5)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <3884358a9286b17f389a72b1426fc4547c23c111)

Linux (patch: 7.0.10)

Linux (3.9)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <fbeab9555564a1b98e8582cd106dfe46c4606991)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <ff375cc75f9167168db38e0464a482d5fbc8d81d)

Linux (patch: 5.15.208)

Linux (patch: 6.12.91)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <179f1852bdedc300e373e807cc102cd81feff196)

Linux (patch: 6.6.141)

Linux (patch: 5.10.257)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <3bd9e113d50034db99d7ef69fd8e5242d15e414a)

Linux (cef401de7be8c4e155c6746bfccf721a4fa5fab9 <3599e6b3cc1ada96883d496a50a210d3afbb6987)
Aliases: GHSA-47jg-vqrv-5f8v

ENISA description: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.

EUVD references (8)

Microsoft Security Response Center MSRC

Microsoft's vendor-authoritative record from the Security Update Guide — its own CVSS score, impact, severity rating, exploit assessment, and KB-article fixes. Refreshed 2026-07-28 03:00 UTC (source: CVRF).

MS severity: Important
MS CVSS base score: 7.8 / 10 (temporal 7.8)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Release: 2026-May

Microsoft remediations / KB articles (2)

CBL-Mariner Releases — Vendor Fix / Security Update (fixed build 6.6.141.1-1)
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade — None Available / CBL-Mariner Releases

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected), `cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected), `cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected), `cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected), `cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected), `cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected), `cef401de7be8c4e155c6746bfccf721a4fa5fab9` (affected)	—
Linux	Linux	`3.9` (affected), `0` (unaffected), `5.10.257` (unaffected), `5.15.208` (unaffected), `6.1.174` (unaffected), `6.6.141` (unaffected), `6.12.91` (unaffected), `6.18.33` (unaffected), `7.0.10` (unaffected)	—

Vendor references (7)

References embedded in the original CVE record by the assigning CNA.

Web references (27)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

MSRC update guide: CVE-2026-46300 msrc
None Available msrc
http://www.openwall.com/lists/oss-security/2026/05/21/12 tenable:www.openwall.com
http://www.openwall.com/lists/oss-security/2026/05/21/13 tenable:www.openwall.com
http://www.openwall.com/lists/oss-security/2026/05/13/5 tenable:www.openwall.com
http://www.openwall.com/lists/oss-security/2026/05/21/11 tenable:www.openwall.com
https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c tenable:git.kernel.org
https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 tenable:git.kernel.org
https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 tenable:git.kernel.org
https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a tenable:git.kernel.org
https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e tenable:git.kernel.org
https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 tenable:git.kernel.org
https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 tenable:git.kernel.org
https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 tenable:git.kernel.org
https://www.first.org/epss/ tenable:www.first.org
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31535 rapid7:euvd.enisa.europa.eu
https://attackerkb.com/topics/CVE-2026-46300 rapid7:attackerkb.com
https://aws.amazon.com/security/security-bulletins/rss/2026-029-aws/ tenable:aws.amazon.com
https://aws.amazon.com/security/security-bulletins/rss/2026-030-aws/ tenable:aws.amazon.com
https://nvd.nist.gov/vuln/detail/CVE-2026-46300 tenable:nvd.nist.gov
https://securityaffairs.com/192145/uncategorized/linux-kernel-bug-fragnesia-allows-local-root-access-attacks.html tenable:securityaffairs.com
https://securityaffairs.com/192436/uncategorized/dirtydecrypt-poc-released-for-yet-another-linux-flaw.html tenable:securityaffairs.com
https://thehackernews.com/2026/05/new-fragnesia-linux-kernel-lpe-grants.html tenable:thehackernews.com
https://www.cve.org/CVERecord?id=CVE-2026-46300 tenable:www.cve.org
https://www.infosecurity-magazine.com/news/fragnesia-linux-kernel-lpe-root/ tenable:www.infosecurity-magazine.com
https://www.securityweek.com/poc-released-for-dirtydecrypt-linux-kernel-vulnerability/ tenable:www.securityweek.com
https://github.com/v12-security/pocs/tree/main/fragnesia tenable:github.com

Remediations (17)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

RHSB-2026-003 Networking subsystem Privilege Escalation - Linux Kernel ...

web:access.redhat.com

The mitigation methods below address both vulnerabilities that affect Red Hat products — CVE - 2026 -43284 (IPsec ESP) and CVE-2026-46300 (XFRM ESP-in-TCP). CVE - 2026 -43500 (rxrpc) does not affect Red Hat products and requires no mitigation .

2026-05-25 00:18 UTC
Oracle Patch 38632161: Step-by-Step Guide to Upgrade Oracle 19c to ...

web:dbainsight.com

Learn how to apply Oracle Patch 38632161 to upgrade Oracle Database 19c to Release Update 19.30. This step-by-step DBA guide covers OPatch upgrade, conflict checks, patching, and datapatch validation.

2026-05-25 00:18 UTC
Oracle Critical Patch Update (CPU) April 2026 for Oracle Java SE

web:docs.oracle.com

Oracle Critical Patch Update (CPU) April 2026 for Oracle Java SE Services: Java Management Release Date: April 21, 2026

2026-05-25 00:18 UTC
HORKimhab/CVE-2026-46300: CVE-2026-46300 - GitHub

web:github.com

CVE-2026-46300 . Contribute to HORKimhab/ CVE - 2026 - 46300 development by creating an account on GitHub.

2026-05-25 00:18 UTC
Nvd - Cve-2026-6300

web:nvd.nist.gov

An official website of the United States government Here's how you know

2026-05-25 00:18 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-25 00:18 UTC
Fragnesia (CVE-2026-46300): The Third Linux Kernel Root Exploit in ...

web:www.gotekky.com

On May 13, 2026 , security researcher William Bowling and the V12 Security team publicly disclosed Fragnesia ( CVE-2026-46300 ), a new Linux kernel local privilege escalation vulnerability. A working public proof-of-concept exists and any unprivileged local user can use it to gain root in a single command. It is the third kernel root exploit requiring a patch in three weeks, following Copy Fail ...

2026-05-25 00:18 UTC
Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch ...

web:www.helpnetsecurity.com

Researchers have found and disclosed yet another LPE vulnerability in the Linux kernel: CVE-2026-46300 , aka "Fragnesia".

2026-05-25 00:18 UTC
Fragnesia CVE-2026-46300: Linux Kernel LPE Vulnerability Explained

web:www.picussecurity.com

Fragnesia ( CVE-2026-46300 ) lets attackers gain root access on Linux via a kernel page cache flaw. Learn how it works and how to remediate it.

2026-05-25 00:18 UTC
Oracle Patches 450 Vulnerabilities With April 2026 CPU

web:www.securityweek.com

Oracle on Tuesday announced the release of 481 new security patches as part of its April 2026 Critical Patch Update (CPU). Across the 28 product families that received security updates, more than 300 patches address vulnerabilities that are remotely exploitable without authentication.

2026-05-25 00:18 UTC
Fragnesia (CVE-2026-46300) — Mitigation and Kernel Update on CloudLinux

web:blog.cloudlinux.com

Imunify360 already blocks the exploit related to Fragnesia ( CVE-2026-46300 ) and uses extended heuristics to identify and mitigate new indicators more quickly. This is an additional layer of defense. It does not replace the kernel update, but customers running Imunify360 are covered against currently observed exploitation attempts in the meantime.

2026-05-26 02:52 UTC
Linux Kernel Fragnesia Privilege Escalation Vulnerability (CVE-2026 ...

web:nsfocusglobal.com

Overview Recently, NSFOCUS Technology CERT detected that the Linux kernel Fragnesia privilege escalation vulnerability ( CVE-2026-46300 ) was disclosed online. Fragnesia is a new variant of Dirty Frag; Due to the logical defects in the processing of shared page fragments by the ESP-in-TCP subsystem during the skb merge process, a local attacker with ordinary permissions can inject arbitrary ...

2026-05-26 02:52 UTC
Fragnesia (CVE-2026-46300): New Linux LPE That Bypasses the Dirty Frag ...

web:tuxcare.com

The candidate follow-up patch (submitted by Bowling) explicitly cites the Dirty Frag fix (f4c50a4034e6) as one of two commits it "fixes" - meaning the original Dirty Frag remediation exposed a previously latent bug in a way that became practically exploitable.

2026-05-26 02:52 UTC
CVE-2026-46300 | Ubuntu

web:ubuntu.com

Notes cengizcan Couple with CVE - 2026 -43284 (Dirty Frag ESP): per-series SRU spins should ship both fixes together. Fragnesia closes a related skb_try_coalesce flag-propagation gap in the same ESP/XFRM surface. Shipping the 43284 fix without this one may leave a regression window.

2026-05-26 02:52 UTC
Kernel 7.0.9 Release: Audit & Update Guide (CVE-2026-46300)

web:www.fosslinux.com

I explore the emergency Kernel 7.0.9 release to patch the Fragnesia ( CVE-2026-46300 ) and Dirty Frag LPE flaws. In this guide, I show you how to audit your systems across Fedora, Ubuntu, and Arch Linux, and how to verify active modprobe blocklist workarounds on your production servers without rebooting the systems immediately.

2026-05-26 02:52 UTC
Fragnesia CVE-2026-46300: New Linux Kernel Flaw Raises Security Concerns

web:www.linuxteck.com

Fragnesia CVE-2026-46300 is a new Linux kernel local privilege escalation vulnerability affecting major Linux distributions. Learn the impact, mitigation steps, kernel checks, and patch guidance for Ubuntu, RHEL, Debian, and Kubernetes environments.

2026-05-26 02:52 UTC
CVE-2026-46300 (Fragnesia): Linux Kernel ESP-in-TCP LPE FAQ - Tenable

web:www.tenable.com

CVE-2026-46300 (Fragnesia) is a Linux kernel privilege escalation in the XFRM ESP-in-TCP subsystem. Public PoC, no race condition. Dirty Frag patches do not fix it.

2026-05-26 02:52 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-46300.json.

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-23T12:24:19.703Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/13/5"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/21/11"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/21/12"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/21/13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/core/skbuff.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3599e6b3cc1ada96883d496a50a210d3afbb6987",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            },
            {
              "lessThan": "2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            },
            {
              "lessThan": "9d3e5fd19fe1063bf607219e8562fbd567b8e8d5",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            },
            {
              "lessThan": "78bf6b6bb19541d19fbda6242e7cfe2c682763c0",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            },
            {
              "lessThan": "760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            },
            {
              "lessThan": "3bd9e113d50034db99d7ef69fd8e5242d15e414a",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            },
            {
              "lessThan": "3884358a9286b17f389a72b1426fc4547c23c111",
              "status": "affected",
              "version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/core/skbuff.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.9"
            },
            {
              "lessThan": "3.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.208",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.174",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.91",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.10",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.257",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.208",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.174",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.141",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.91",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.33",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.10",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to.  If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers.  In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data().  If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags.  The tailroom copy path does not need the marker because it copies\nbytes into @to's linear data rather than transferring frag descriptors."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T13:20:27.462Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987"
        },
        {
          "url": "https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c"
        },
        {
          "url": "https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0"
        },
        {
          "url": "https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e"
        },
        {
          "url": "https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a"
        },
        {
          "url": "https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111"
        }
      ],
      "title": "net: skbuff: preserve shared-frag marker during coalescing",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46300",
    "datePublished": "2026-05-23T11:44:02.231Z",
    "dateReserved": "2026-05-13T15:03:33.111Z",
    "dateUpdated": "2026-05-23T13:20:27.462Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}