Improper Check or Handling of Exceptional Conditions in Linux kernel - CVE-2026-46001
Published: May 28, 2026
Vulnerability details
The vulnerability allows a local attacker to cause incorrect processing of stale or incomplete data.
The vulnerability exists due to improper error handling in pt5161l_read_block_data() when handling block data reads with an unexpected length. A local attacker can cause a device to repeatedly return data with an unexpected length so the function returns a positive value and callers process stale or incomplete data.
The issue occurs when all three retries are exhausted and a positive byte count is returned instead of an error.
Affected software
Ubuntu
linux (Ubuntu package)
linux-realtime (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-aws (Ubuntu package)
linux-raspi (Ubuntu package)
linux-azure (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-ibm (Ubuntu package)
linux-azure-fde (Ubuntu package)
How to mitigate CVE-2026-46001
linux (Ubuntu package) - update to 7.0.0-27.27
linux-realtime (Ubuntu package) - update to 7.0.0-27.27.1
linux-gcp (Ubuntu package) - update to 7.0.0-1007.7
linux-oracle (Ubuntu package) - update to 7.0.0-1007.7
linux-aws (Ubuntu package) - update to 7.0.0-1008.8
linux-raspi (Ubuntu package) - update to 7.0.0-1014.14
linux-azure (Ubuntu package) - update to 7.0.0-1010.10
linux-nvidia (Ubuntu package) - update to 7.0.0-1013.13
linux-ibm (Ubuntu package) - update to 7.0.0-1009.9
linux-azure-fde (Ubuntu package) - update to 7.0.0-1009.9