What is the CVSS score of CVE-2026-46046?

CVE-2026-46046 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-46046?

Yes, a patch is available for CVE-2026-46046. Update the affected software to the latest version immediately.

Linux CVE-2026-46046

EUVD-2026-32428 MEDIUM

2026-05-27 416baaa9-dc9f-4396-8d5f-8c081fb06d67

GHSA-m5xh-rjfq-cc6f

Linux Information Disclosure Red Hat Suse

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SUSE

MEDIUM

qualitative

Red Hat

5.5 LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 16, 2026 - 13:23 vuln.today

CVSS changed

Jun 16, 2026 - 13:22 NVD

5.5 (MEDIUM)

Patch available

May 27, 2026 - 19:46 EUVD

CVE Published

May 27, 2026 - 14:17 nvd

MEDIUM 5.5

CVE Published

May 27, 2026 - 14:17 nvd

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()

The commit c8e008b60492 ("ext4: ignore xattrs past end") introduced a refcount leak in when block_csum is false.

ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to get iloc.bh, but never releases it with brelse().

AnalysisAI

Missing brelse() in the ext4 filesystem's ext4_xattr_inode_dec_ref_all() function causes a buffer head refcount leak that can degrade system availability on affected Linux kernel versions. Introduced by commit c8e008b60492 (

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected

CVE-2026-46046 vulnerability details – vuln.today

Back

SUSE Linux Enterprise High Performance Computing 15 SP7	Affected
SUSE Linux Enterprise High Performance Computing 15 SP7	Affected
SUSE Linux Enterprise Live Patching 15 SP7	Affected
SUSE Linux Enterprise Live Patching 15 SP7	Affected
SUSE Linux Enterprise Micro 5.3	Affected
SUSE Linux Enterprise Micro 5.3	Affected
SUSE Linux Enterprise Micro 5.3	Affected
SUSE Linux Enterprise Micro 5.3	Affected
SUSE Linux Enterprise Micro 5.4	Affected
SUSE Linux Enterprise Micro 5.4	Affected
SUSE Linux Enterprise Micro 5.4	Affected
SUSE Linux Enterprise Micro 5.4	Affected
SUSE Linux Enterprise Micro 5.5	Affected
SUSE Linux Enterprise Micro 5.5	Affected
SUSE Linux Enterprise Micro 5.5	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP7	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP7	Affected
SUSE Linux Enterprise Module for Legacy 15 SP7	Affected
SUSE Linux Enterprise Module for Legacy 15 SP7	Affected
SUSE Linux Enterprise Module for Public Cloud 15 SP7	Affected
SUSE Linux Enterprise Module for Public Cloud 15 SP7	Affected
SUSE Linux Enterprise Real Time 15 SP7	Affected
SUSE Linux Enterprise Server 15 SP7	Affected
SUSE Linux Enterprise Server 15 SP7	Affected
SUSE Linux Enterprise Server 16.0	Affected
SUSE Linux Enterprise Server 16.0	Affected
SUSE Linux Enterprise Server 16.1	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Affected
SUSE Linux Enterprise Server for SAP applications 16.0	Affected
SUSE Linux Enterprise Server for SAP applications 16.0	Affected
SUSE Linux Enterprise Server for SAP applications 16.1	Affected
SUSE Linux Enterprise Workstation Extension 15 SP7	Affected
SUSE Linux Enterprise Workstation Extension 15 SP7	Affected
SUSE Linux Micro 6.0	Affected
SUSE Linux Micro 6.0	Affected
SUSE Linux Micro 6.0	Affected
SUSE Linux Micro 6.1	Affected
SUSE Linux Micro 6.1	Affected
SUSE Linux Micro 6.1	Affected
SUSE Linux Micro 6.2	Affected
SUSE Linux Micro 6.2	Affected
SUSE Real Time Module 15 SP7	Affected
openSUSE Leap 16.0	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	Affected
SUSE Linux Enterprise Live Patching 12 SP5	Not-Affected
SUSE Linux Enterprise Live Patching 12 SP5	Not-Affected
SUSE Linux Enterprise Live Patching 15 SP4	Affected
SUSE Linux Enterprise Live Patching 15 SP4	Affected
SUSE Linux Enterprise Live Patching 15 SP5	Affected
SUSE Linux Enterprise Live Patching 15 SP5	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP4	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP4	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP5	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP6	Affected
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE	Not-Affected
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE	Not-Affected
SUSE Linux Enterprise Server 12 SP5	Not-Affected
SUSE Linux Enterprise Server 12 SP5-LTSS	Not-Affected
SUSE Linux Enterprise Server 12 SP5-LTSS	Not-Affected
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security	Not-Affected
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security	Not-Affected
SUSE Linux Enterprise Server 15 SP4	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	Affected
SUSE Linux Enterprise Server 15 SP5	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	Affected
SUSE Linux Enterprise Server 15 SP6	Affected
SUSE Linux Enterprise Server 15 SP6-LTSS	Affected
SUSE Linux Enterprise Server 15 SP6-LTSS	Affected
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	Affected
SUSE Manager Proxy 4.3	Affected
SUSE Manager Proxy LTS 4.3	Affected
SUSE Manager Retail Branch Server 4.3	Affected
SUSE Manager Retail Branch Server LTS 4.3	Affected
SUSE Manager Server 4.3	Affected
SUSE Manager Server LTS 4.3	Affected
SUSE CaaS Platform 4.0	Not-Affected
SUSE Enterprise Storage 6	Not-Affected
SUSE Enterprise Storage 7	Not-Affected
SUSE Enterprise Storage 7.1	Not-Affected
SUSE Linux Enterprise Desktop 11 SP4	Not-Affected
SUSE Linux Enterprise Desktop 12 SP4	Not-Affected
SUSE Linux Enterprise Desktop 15 SP1	Not-Affected
SUSE Linux Enterprise Desktop 15 SP2	Not-Affected
SUSE Linux Enterprise Desktop 15 SP3	Not-Affected
SUSE Linux Enterprise Desktop 15 SP4	Affected
SUSE Linux Enterprise Desktop 15 SP5	Affected
SUSE Linux Enterprise Desktop 15 SP6	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP2	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	Affected
SUSE Linux Enterprise Micro 5.0	Not-Affected
SUSE Linux Enterprise Micro 5.1	Not-Affected
SUSE Linux Enterprise Micro 5.2	Not-Affected
SUSE Linux Enterprise Micro 5.2	Not-Affected
SUSE Linux Enterprise Module for Basesystem 15 SP1	Not-Affected
SUSE Linux Enterprise Module for Basesystem 15 SP2	Not-Affected
SUSE Linux Enterprise Module for Basesystem 15 SP3	Not-Affected
SUSE Linux Enterprise Module for Development Tools 15 SP1	Not-Affected
SUSE Linux Enterprise Module for Development Tools 15 SP2	Not-Affected
SUSE Linux Enterprise Module for Development Tools 15 SP3	Not-Affected
SUSE Linux Enterprise Real Time 15 SP2	Not-Affected
SUSE Linux Enterprise Real Time 15 SP3	Not-Affected
SUSE Linux Enterprise Real Time 15 SP4	Affected
SUSE Linux Enterprise Real Time 15 SP4	Affected
SUSE Linux Enterprise Real Time 15 SP5	Affected
SUSE Linux Enterprise Server 11 SP4	Not-Affected
SUSE Linux Enterprise Server 11 SP4-LTSS	Not-Affected
SUSE Linux Enterprise Server 12 SP4	Not-Affected
SUSE Linux Enterprise Server 12 SP4-ESPOS	Not-Affected
SUSE Linux Enterprise Server 12 SP4-LTSS	Not-Affected
SUSE Linux Enterprise Server 12 SP4-LTSS	Not-Affected
SUSE Linux Enterprise Server 15 SP1	Not-Affected
SUSE Linux Enterprise Server 15 SP1-BCL	Not-Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	Not-Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	Not-Affected
SUSE Linux Enterprise Server 15 SP2	Not-Affected
SUSE Linux Enterprise Server 15 SP2-BCL	Not-Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	Not-Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	Not-Affected
SUSE Linux Enterprise Server 15 SP3	Not-Affected
SUSE Linux Enterprise Server 15 SP3-BCL	Not-Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	Not-Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	Not-Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	Affected
SUSE Manager Proxy 4.0	Not-Affected
SUSE Manager Proxy 4.1	Not-Affected
SUSE Manager Proxy 4.2	Not-Affected
SUSE Manager Retail Branch Server 4.0	Not-Affected
SUSE Manager Retail Branch Server 4.1	Not-Affected
SUSE Manager Retail Branch Server 4.2	Not-Affected
SUSE Manager Server 4.0	Not-Affected
SUSE Manager Server 4.1	Not-Affected
SUSE Manager Server 4.2	Not-Affected
SUSE OpenStack Cloud 9	Not-Affected
SUSE OpenStack Cloud Crowbar 9	Not-Affected
SUSE Real Time Module 15 SP4	Affected
SUSE Real Time Module 15 SP5	Affected
openSUSE Leap 15.3	Not-Affected
openSUSE Leap 15.4	Affected
openSUSE Leap 15.4	Affected
openSUSE Leap 15.5	Affected
openSUSE Leap 15.5	Affected
openSUSE Leap 15.6	Affected

Linux CVE-2026-46046

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code