SB2026052402 - Improper control of a resource through its lifetime in Linux kernel core

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-46300)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause memory corruption.

The vulnerability exists due to improper state management in skb_try_coalesce() when transferring paged fragments during TCP receive coalescing. A local user can trigger packet processing that moves shared fragments into an unmarked skb to cause memory corruption.

The issue can lead ESP input to incorrectly treat an uncloned nonlinear skb as not having shared fragments and perform in-place decryption over externally owned or page-cache-backed fragments.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
• https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987
• https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111
• https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a
• https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e
• https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0
• https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
• http://www.openwall.com/lists/oss-security/2026/05/13/5
• http://www.openwall.com/lists/oss-security/2026/05/21/11
• http://www.openwall.com/lists/oss-security/2026/05/21/12
• http://www.openwall.com/lists/oss-security/2026/05/21/13