Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
CVE-2026-46299: Linux kernel HFS+ mount can free locked data
CVE-2026-46299 · published 4 months ago
Summary
The Linux kernel’s HFS+ file‑system code could release a lock while still holding it, which may cause the system to crash or behave unpredictably when mounting HFS+ volumes. The issue is present in several Canonical Linux packages. Updating to the latest kernel version that includes the fix resolves the problem.
What to do
- Update debian linux to version 6.12.88-1.
- Update debian linux to version 7.0.7-1.
- Update bellsoft linux-lts to version 6.12.92-r0.
- Update debian rootio-linux to version 6.1.174-1.root.io.148.
- Update canonical linux-aws-6.8 to version 6.8.0-1061.64~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1063.71~22.04.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1062.69~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1064.72~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-136.136~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1061.62~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-136.136.2~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1059.62~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1058.61~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-136.136~22.04.3.
- Update canonical linux-realtime-6.8 to version 6.8.1-1056.57~22.04.2.
- Update canonical linux to version 6.8.0-136.136.
- Update canonical linux-aws to version 6.8.0-1061.64.
- Update canonical linux-azure to version 6.8.0-1063.71.
- Update canonical linux-azure-fde to version 6.8.0-1062.69.
- Update canonical linux-gcp to version 6.8.0-1064.72.
- Update canonical linux-gke to version 6.8.0-1059.67.
- Update canonical linux-gkeop to version 6.8.0-1046.50.
- Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1061.62.
- Update canonical linux-lowlatency to version 6.8.0-136.136.2.
- Update canonical linux-nvidia to version 6.8.0-1059.62.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1059.62.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1030.31.
- Update canonical linux-oracle to version 6.8.0-1058.61.
- Update canonical linux-raspi to version 6.8.0-1061.65.
- Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
- Update canonical linux-xilinx to version 6.8.0-1033.34.
- Update canonical linux-aws-fips to version 6.8.0-1061.64+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1063.71+fips2.
- Update canonical linux-fips to version 6.8.0-136.136+fips2.
- Update canonical linux-gcp-fips to version 6.8.0-1064.72+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2050.52.
- Update canonical linux-realtime to version 6.8.1-1056.57.
- Update canonical linux to version 7.0.0-28.28.
- Update canonical linux-aws to version 7.0.0-1009.9.
- Update canonical linux-azure to version 7.0.0-1010.10.
- Update canonical linux-azure-fde to version 7.0.0-1009.9.
- Update canonical linux-gcp to version 7.0.0-1008.8.
- Update canonical linux-gke to version 7.0.0-1003.4.
- Update canonical linux-ibm to version 7.0.0-1010.10.
- Update canonical linux-nvidia to version 7.0.0-1016.16.
- Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
- Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
- Update canonical linux-oracle to version 7.0.0-1008.8.
- Update canonical linux-raspi to version 7.0.0-1015.15.
- Update canonical linux-realtime to version 7.0.0-28.28.1.
- Update canonical linux-riscv to version 7.0.0-28.28.1.
- Update debian rootio-linux to version 5.10.257-1.root.io.102.
- Update debian rootio-linux to version 5.10.259-1.root.io.112.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-bluefield to version 6.8.0-1028.33.
- Update debian linux to version 6.1.176-1.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update linux kernel to version 7.0.7.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update canonical linux-aws-5.15 to version 5.15.0-1117.124~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1123.132~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-198.208~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1112.118~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-195.205~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux to version 5.15.0-198.208.
- Update canonical linux-aws to version 5.15.0-1117.124.
- Update canonical linux-azure to version 5.15.0-1123.132.
- Update canonical linux-azure-fde to version 5.15.0-1122.131.
- Update canonical linux-gcp to version 5.15.0-1118.128.
- Update canonical linux-gke to version 5.15.0-1113.119.
- Update canonical linux-gkeop to version 5.15.0-1100.108.
- Update canonical linux-ibm to version 5.15.0-1111.115.
- Update canonical linux-intel-iotg to version 5.15.0-1112.118.
- Update canonical linux-kvm to version 5.15.0-1109.114.
- Update canonical linux-lowlatency to version 5.15.0-195.205.
- Update canonical linux-nvidia to version 5.15.0-1112.113.
- Update canonical linux-oracle to version 5.15.0-1114.120.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1080.84.
- Update canonical linux-bluefield to version 5.15.0-1101.103.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1109.111.
- Update canonical linux-realtime to version 5.15.0-1116.125.
- Update canonical linux-aws-fips to version 5.15.0-1117.124+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1123.132+fips1.
- Update canonical linux-fips to version 5.15.0-198.208+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1118.128+fips1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
Showing 50 of 276. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1117.124~20.04.1 Fix: upgrade to 5.15.0-1117.124~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1123.132~20.04.1 Fix: upgrade to 5.15.0-1123.132~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1118.128~20.04.1 Fix: upgrade to 5.15.0-1118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-198.208~20.04.1 Fix: upgrade to 5.15.0-198.208~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1112.118~20.04.1 Fix: upgrade to 5.15.0-1112.118~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-195.205~20.04.1 Fix: upgrade to 5.15.0-195.205~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1117.124 Fix: upgrade to 5.15.0-1117.124
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1061.64~22.04.1 Fix: upgrade to 6.8.0-1061.64~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1123.132 Fix: upgrade to 5.15.0-1123.132
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1063.71~22.04.1 Fix: upgrade to 6.8.0-1063.71~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1062.69~22.04.1 Fix: upgrade to 6.8.0-1062.69~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1118.128 Fix: upgrade to 5.15.0-1118.128
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1064.72~22.04.1 Fix: upgrade to 6.8.0-1064.72~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1100.108 Fix: upgrade to 5.15.0-1100.108
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-136.136~22.04.1 Fix: upgrade to 6.8.0-136.136~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1061.62~22.04.1 Fix: upgrade to 6.8.0-1061.62~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1109.114 Fix: upgrade to 5.15.0-1109.114
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-195.205 Fix: upgrade to 5.15.0-195.205
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-136.136.2~22.04.1 Fix: upgrade to 6.8.0-136.136.2~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1112.113 Fix: upgrade to 5.15.0-1112.113
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1059.62~22.04.1 Fix: upgrade to 6.8.0-1059.62~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1058.61~22.04.1 Fix: upgrade to 6.8.0-1058.61~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-136.136~22.04.3 Fix: upgrade to 6.8.0-136.136~22.04.3
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1080.84 Fix: upgrade to 5.15.0-1080.84
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1101.103 Fix: upgrade to 5.15.0-1101.103
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1117.124+fips1 Fix: upgrade to 5.15.0-1117.124+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1123.132+fips1 Fix: upgrade to 5.15.0-1123.132+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-198.208+fips1 Fix: upgrade to 5.15.0-198.208+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1118.128+fips1 Fix: upgrade to 5.15.0-1118.128+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1109.111 Fix: upgrade to 5.15.0-1109.111
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1116.125 Fix: upgrade to 5.15.0-1116.125
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1056.57~22.04.2 Fix: upgrade to 6.8.1-1056.57~22.04.2
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-136.136 Fix: upgrade to 6.8.0-136.136
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1061.64 Fix: upgrade to 6.8.0-1061.64
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1063.71 Fix: upgrade to 6.8.0-1063.71
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1062.69 Fix: upgrade to 6.8.0-1062.69
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1064.72 Fix: upgrade to 6.8.0-1064.72
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1059.67 Fix: upgrade to 6.8.0-1059.67
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1046.50 Fix: upgrade to 6.8.0-1046.50
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1061.62 Fix: upgrade to 6.8.0-1061.62
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-136.136.2 Fix: upgrade to 6.8.0-136.136.2
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1059.62 Fix: upgrade to 6.8.0-1059.62
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1059.62.1 Fix: upgrade to 6.8.0-1059.62.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1030.31 Fix: upgrade to 6.8.0-1030.31
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1058.61 Fix: upgrade to 6.8.0-1058.61
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1061.65 Fix: upgrade to 6.8.0-1061.65
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1016.16 Fix: upgrade to 7.0.0-1016.16
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Debian:11 | debian | linux | All versions |
| Debian:12 | debian | linux |
< 6.1.176-1 Fix: upgrade to 6.1.176-1
|
| Debian:13 | debian | linux |
< 6.12.88-1 Fix: upgrade to 6.12.88-1
|
| Debian:14 | debian | linux |
< 7.0.7-1 Fix: upgrade to 7.0.7-1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-198.208 Fix: upgrade to 5.15.0-198.208
|
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1033.34 Fix: upgrade to 6.8.0-1033.34
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1028.33 Fix: upgrade to 6.8.0-1028.33
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1061.64+fips1 Fix: upgrade to 6.8.0-1061.64+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1063.71+fips2 Fix: upgrade to 6.8.0-1063.71+fips2
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-136.136+fips2 Fix: upgrade to 6.8.0-136.136+fips2
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1064.72+fips1 Fix: upgrade to 6.8.0-1064.72+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2050.52 Fix: upgrade to 6.8.0-2050.52
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1056.57 Fix: upgrade to 6.8.1-1056.57
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:25.10 | canonical | linux | All versions |
| Ubuntu:25.10 | canonical | linux-aws | All versions |
| Ubuntu:25.10 | canonical | linux-azure | All versions |
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp | All versions |
| Ubuntu:25.10 | canonical | linux-oracle | All versions |
| Ubuntu:25.10 | canonical | linux-raspi | All versions |
| Ubuntu:25.10 | canonical | linux-realtime | All versions |
| Ubuntu:25.10 | canonical | linux-riscv | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-28.28 Fix: upgrade to 7.0.0-28.28
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Alpaquita:23 | bellsoft | linux-lts | >= 6.1.175-r0 |
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.87-r0, < 6.12.92-r0 Fix: upgrade to 6.12.92-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.87-r0, < 6.12.92-r0 Fix: upgrade to 6.12.92-r0
|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.174-1.root.io.148 Fix: upgrade to 6.1.174-1.root.io.148
|
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-28.28~24.04.1 Fix: upgrade to 7.0.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1016.16~24.04.1 Fix: upgrade to 7.0.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-28.28.1~24.04.3 Fix: upgrade to 7.0.0-28.28.1~24.04.3
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1003.4 Fix: upgrade to 7.0.0-1003.4
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2016.16 Fix: upgrade to 7.0.0-2016.16
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.257-1.root.io.102 < 5.10.259-1.root.io.112 Fix: upgrade to 5.10.257-1.root.io.102
|
| – | linux | linux_kernel |
>= 3.19, < 5.10.259 >= 5.11, < 5.15.210 >= 5.16, < 6.1.176 >= 6.2, < 6.6.140 >= 6.7, < 6.12.88 >= 6.13, < 6.18.30 >= 6.19, < 7.0.7 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Linux | linux | kernel |
>= 6.19.0, < 7.0.7 Fix: upgrade to 7.0.7
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2026-46299 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure, which acquires tree->tree_lock. If the subsequent call to hfsplus_cat_build_key() fails, the function jumps to the out_put_root error label without releasing the lock. The later cleanup path then frees the tree data structure with the lock still held, triggering a held lock freed warning. Fix this by adding the missing hfs_find_exit(&fd) call before jumping to the out_put_root error label. This ensures that tree->tree_lock is properly released on the error path. The bug was originally detected on v6.13-rc1 using an experimental static analysis tool we are developing, and we have verified that the issue persists in the latest mainline kernel. The tool is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available. We confirmed the bug by runtime testing under QEMU with x86_64 defconfig, lockdep enabled, and CONFIG_HFSPLUS_FS=y. To trigger the error path, we used GDB to dynamically shrink the max_unistr_len parameter to 1 before hfsplus_asc2uni() is called. This forces hfsplus_asc2uni() to naturally return -ENAMETOOLONG, which propagates to hfsplus_cat_build_key() and exercises the faulty error path. The following warning was observed during mount: ========================= WARNING: held lock freed! 7.0.0-rc3-00016-gb4f0dd314b39 #4 Not tainted ------------------------- mount/174 is freeing memory ffff888103f92000-ffff888103f92fff, with a lock still held there! ffff888103f920b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x154/0x1e0 2 locks held by mount/174: #0: ffff888103f960e0 (&type->s_umount_key#42/1){+.+.}-{4:4}, at: alloc_super.constprop.0+0x167/0xa40 #1: ffff888103f920b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x154/0x1e0 stack backtrace: CPU: 2 UID: 0 PID: 174 Comm: mount Not tainted 7.0.0-rc3-00016-gb4f0dd314b39 #4 PREEMPT(lazy) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x82/0xd0 debug_check_no_locks_freed+0x13a/0x180 kfree+0x16b/0x510 ? hfsplus_fill_super+0xcb4/0x18a0 hfsplus_fill_super+0xcb4/0x18a0 ? __pfx_hfsplus_fill_super+0x10/0x10 ? srso_return_thunk+0x5/0x5f ? bdev_open+0x65f/0xc30 ? srso_return_thunk+0x5/0x5f ? pointer+0x4ce/0xbf0 ? trace_contention_end+0x11c/0x150 ? __pfx_pointer+0x10/0x10 ? srso_return_thunk+0x5/0x5f ? bdev_open+0x79b/0xc30 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? vsnprintf+0x6da/0x1270 ? srso_return_thunk+0x5/0x5f ? __mutex_unlock_slowpath+0x157/0x740 ? __pfx_vsnprintf+0x10/0x10 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? mark_held_locks+0x49/0x80 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? irqentry_exit+0x17b/0x5e0 ? trace_irq_disable.constprop.0+0x116/0x150 ? __pfx_hfsplus_fill_super+0x10/0x10 ? __pfx_hfsplus_fill_super+0x10/0x10 get_tree_bdev_flags+0x302/0x580 ? __pfx_get_tree_bdev_flags+0x10/0x10 ? vfs_parse_fs_qstr+0x129/0x1a0 ? __pfx_vfs_parse_fs_qstr+0x3/0x10 vfs_get_tree+0x89/0x320 fc_mount+0x10/0x1d0 path_mount+0x5c5/0x21c0 ? __pfx_path_mount+0x10/0x10 ? trace_irq_enable.constprop.0+0x116/0x150 ? trace_irq_enable.constprop.0+0x116/0x150 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? kmem_cache_free+0x307/0x540 ? user_path_at+0x51/0x60 ? __x64_sys_mount+0x212/0x280 ? srso_return_thunk+0x5/0x5f __x64_sys_mount+0x212/0x280 ? __pfx___x64_sys_mount+0x10/0x10 ? srso_return_thunk+0x5/0x5f ? trace_irq_enable.constprop.0+0x116/0x150 ? srso_return_thunk+0x5/0x5f do_syscall_64+0x111/0x680 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ffacad55eae Code: 48 8b 0d 85 1f 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 8 RSP: 002b ---truncated---
References
- https://ubuntu.com/security/notices/USN-8566-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8568-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8569-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8567-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8593-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8596-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8608-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8609-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8618-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8619-1 Vendor Advisory
- https://git.kernel.org/stable/c/041acda6d9f96006703466449c10c9a69590c8b9 Third Party Advisory
- https://git.kernel.org/stable/c/3ca80e3012c8be85b4f8d0d20eac8d3b17ff257e Third Party Advisory
- https://git.kernel.org/stable/c/90c500e4fd83fa33c09bc7ee23b6d9cc487ac733 Third Party Advisory
- https://git.kernel.org/stable/c/bfbcce6a7b0552a390620d9b2c4d2bcb1825cbdc Third Party Advisory
- https://git.kernel.org/stable/c/d309d3308de658d87c42d97e044c89a226327526 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-46299 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-46299 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-46299 Third Party Advisory
- https://git.kernel.org/linus/90c500e4fd83fa33c09bc7ee23b6d9cc487ac733 Third Party Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-46299 Vendor Advisory
- https://git.kernel.org/stable/c/6499c9c8ec437a369e7e221dad91f6122b50759d URL
- https://git.kernel.org/stable/c/c554ddc87af4d4e4be42f8aed1baec9e1c7588e0 URL
- https://git.kernel.org/stable/c/e890656accee4c26d932ea388eb8936a6e22184d URL
- https://ubuntu.com/security/notices/USN-8664-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8663-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8665-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8607-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46299... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-46299 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8574-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8603-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8606-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8876-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8878-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8877-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-2 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-667Improper Locking
Timeline
Published8 Jun 2026
Updated22 Oct 2026
First seen8 Jun 2026
Sources
CVE-2026-46299 · NVD
DEBIAN-CVE-2026-46299 · OSV
UBUNTU-CVE-2026-46299 · OSV
BELL-CVE-2026-46299 · OSV
CVE-2026-46299 · OSV
Track software like this
Free during beta