Known Exploited Vulnerabilities October 28, 2026 · CISA KEV Catalog

CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-46300 Linux
Related: CISA Adds Two Known Exploited Vulnerabilities to Catalog Cyber Risks · Oct 28, 2026
CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability Known Exploited Vulnerabilities · Sep 18, 2026
CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability Known Exploited Vulnerabilities · Sep 18, 2026