Skip to main content

CVE-2026-46300

Linux — Linux Kernel Missing Initialization of a Variable Vulnerability

Linux · CWE-787 — Out-of-bounds write | CWE-456 | CWE-123 · in CISA KEV since 2026-10-28

CISA federal deadline in 3 daysCISA KEVActively Exploited
75

EVRS 75 of 100 Urgent

Patch This Cycle

Rank 1,050 of 2,979 tracked

Raised to the floor for a confirmed exploited vulnerability.

Download PDF

Why it scores 75

Evidence available: 6 of 7 signals

Listed in the CISA KEV catalog, and an EPSS probability of 0.102.

  • CISA KEVApplied
  • RansomwareDid not apply
  • Vendor exploitationDid not apply
  • EPSSApplied
  • Microsoft Exploitability IndexNot applicable
  • Pre-patch disclosureNo data
  • KEV recencyApplied
  • CVSSApplied

The band answers “how soon”, not “how bad”. No data for: Pre-patch disclosure. Why some signals show no data

Fix

Patch or fixed version identified

CISA required action

Fixed in

Red Hat OpenShift Container Platform 4.21 -> openshift-0:4.21.0-202605142021.p2.geab2218.assembly.stream.el10.src | Red Hat Enterprise Linux BaseOS E4S (v.8.8) -> bpftool-0:4.18.0-477.143.1.el8_8.ppc64le | NVIDIA for RHEL 10 -> kernel-0:6.12.0-211.8.el10nv.aarch64 | Red Hat Enterprise Linux AppStream (v. 9) -> kernel-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64 | Red Hat Enterprise Linux AppStream (v. 10) -> kernel-64k-debug-debuginfo-0:6.12.0-211.16.1.el10_2.aarch64 | Red Hat Enterprise Linux NFV (v. 8) -> kernel-rt-0:4.18.0-553.125.1.rt7.466.el8_10.src | Red Hat Enterprise Linux BaseOS (v. 8) -> bpftool-0:4.18.0-553.125.1.el8_10.aarch64 | Red Hat Enterprise Linux AppStream E4S (v.9.0) -> bpftool-debuginfo-0:5.14.0-70.180.1.el9_0.aarch64 | Red Hat Enterprise Linux NFV E4S (v.9.0) -> kernel-rt-0:5.14.0-70.180.1.rt21.252.el9_0.src | Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) -> kernel-rt-0:5.14.0-284.172.1.rt14.457.el9_2.src | Red Hat Enterprise Linux BaseOS AUS (v.8.6) -> bpftool-0:4.18.0-372.193.1.el8_6.x86_64 | Red Hat Enterprise Linux AppStream EUS (v.9.4) -> bpftool-debuginfo-0:7.3.0-427.126.1.el9_4.aarch64 | Red Hat OpenShift Container Platform 4.16 -> rhcos-aarch64-416.94.202605200242-0 | Red Hat Enterprise Linux AppStream EUS (v.9.6) -> kernel-64k-debug-debuginfo-0:5.14.0-570.116.1.el9_6.aarch64 | Red Hat Enterprise Linux BaseOS AUS (v.8.4) -> bpftool-0:4.18.0-305.192.1.el8_4.x86_64 | Red Hat Enterprise Linux AppStream EUS (v. 10.0) -> kernel-64k-debug-debuginfo-0:6.12.0-55.75.1.el10_0.aarch64 | Red Hat Enterprise Linux AppStream E4S (v.9.2) -> bpftool-debuginfo-0:7.0.0-284.172.1.el9_2.aarch64 | Red Hat OpenShift Container Platform 4.18 -> rhcos-aarch64-418.94.202605260517-0 | Red Hat OpenShift Container Platform 4.13 -> rhcos-x86_64-413.92.202605271328-0 | Red Hat OpenShift Container Platform 4.12 -> rhcos-x86_64-412.86.202605271418-0 | Red Hat OpenShift Container Platform 4.20 -> rhcos-aarch64-4.20.9.6.202605270908-0 | Red Hat OpenShift Container Platform 4.15 -> rhcos-aarch64-415.92.202606030318-0 | Red Hat OpenShift Container Platform 4.21 -> rhcos-aarch64-4.21.9.6.202606030721-0 | Red Hat OpenShift Container Platform 4.19 -> rhcos-aarch64-4.19.9.6.202606031700-0 | Red Hat Enterprise Linux BaseOS EUS (v.9.6) -> kpatch-patch-5_14_0-570_17_1-0:1-15.el9_6.ppc64le | Red Hat Enterprise Linux BaseOS E4S (v.9.2) -> kpatch-patch-5_14_0-284_104_1-0:1-16.el9_2.ppc64le | Red Hat Enterprise Linux BaseOS (v. 8) -> kpatch-patch-4_18_0-553_109_1-0:1-3.el8_10.ppc64le | Red Hat Enterprise Linux BaseOS E4S (v.8.8) -> kpatch-patch-4_18_0-477_107_1-0:1-6.el8_8.ppc64le | Red Hat Enterprise Linux BaseOS E4S (v.9.4) -> kpatch-patch-5_14_0-427_100_1-0:1-5.el9_4.ppc64le | Red Hat OpenShift Container Platform 4.16 -> rhcos-aarch64-416.94.202606051757-0 | Red Hat OpenShift Container Platform 4.14 -> rhcos-aarch64-414.92.202606231112-0 | NVIDIA for RHEL 10 -> kernel-0:6.12.0-231.12.el10nv.aarch64 | Red Hat OpenShift Container Platform 4.17 -> rhcos-aarch64-417.94.202606250942-0 | SUSE Liberty Linux 9 -> kernel-0:5.14.0-687.10.1.el9_8.x86_64 | SUSE Liberty Linux 10 -> kernel-0:6.12.0-211.16.1.el10_2.x86_64 | SUSE Liberty Linux 8 -> bpftool-0:4.18.0-553.125.1.el8_10.x86_64 | SUSE Liberty Linux 9.6 EMS -> kernel-0:5.14.0-570.116.1.el9_6.x86_64 | SUSE Linux Enterprise Micro 5.5 -> kernel-devel-rt-0:5.14.21-150500.13.137.1.noarch | SUSE Linux Enterprise Micro 5.3 -> kernel-rt-0:5.14.21-150400.15.164.1.x86_64 | SUSE Linux Enterprise High Performance Computing 12 SP5 -> cluster-md-kmp-default-0:4.12.14-122.307.1.aarch64 | SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS -> cluster-md-kmp-default-0:5.14.21-150500.55.163.1.aarch64 | SUSE Linux Enterprise Live Patching 15 SP6 -> kernel-default-livepatch-0:6.4.0-150600.23.109.1.ppc64le | Open Enterprise Server 23.4 -> kernel-64kb-0:5.14.21-150400.24.214.1.aarch64 | SUSE Linux Enterprise Live Patching 15 SP7 -> kernel-livepatch-6_4_0-150700_7_51-rt-0:1-150700.1.7.1.x86_64 | Open Enterprise Server 25.4 -> kernel-64kb-0:6.4.0-150700.53.52.1.aarch64 | SUSE Linux Enterprise Micro 5.3 -> kernel-rt-0:5.14.21-150400.15.167.1.x86_64 | SUSE Linux Enterprise Live Patching 15 SP7 -> kernel-livepatch-6_4_0-150700_7_34-rt-0:4-150700.2.1.x86_64 | SUSE Linux Enterprise Live Patching 15 SP7 -> kernel-livepatch-6_4_0-150700_7_37-rt-0:4-150700.2.1.x86_64 | SUSE Linux Enterprise Live Patching 15 SP7 -> kernel-livepatch-6_4_0-150700_5-rt-0:17-150700.3.1.x86_64 | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_258-default-0:17-2.1.ppc64le | SUSE Linux Enterprise Live Patching 15 SP4 -> kernel-livepatch-5_14_21-150400_24_164-default-0:20-150400.2.1.ppc64le | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_283-default-0:8-2.1.ppc64le | SUSE Linux Enterprise Live Patching 15 SP5 -> kernel-livepatch-5_14_21-150500_55_110-default-0:19-150500.2.1.ppc64le | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_272-default-0:12-2.1.ppc64le | SUSE Linux Enterprise Live Patching 15 SP4 -> kernel-livepatch-5_14_21-150400_24_184-default-0:8-150400.2.1.ppc64le | SUSE Linux Enterprise Live Patching 15 SP5 -> kernel-livepatch-5_14_21-150500_55_116-default-0:16-150500.2.1.ppc64le | SUSE Linux Micro 6.0 -> kernel-default-0:6.4.0-44.1.aarch64 | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_290-default-0:8-2.1.ppc64le | SUSE Linux Micro 6.0 -> kernel-devel-rt-0:6.4.0-45.1.noarch | SUSE Linux Micro 6.1 -> kernel-default-0:6.4.0-44.1.aarch64 | SUSE Linux Micro 6.1 -> kernel-devel-rt-0:6.4.0-45.1.noarch | SUSE Linux Enterprise Live Patching 15 SP5 -> kernel-livepatch-5_14_21-150500_55_130-default-0:8-150500.2.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-64kb-0:6.12.0-160000.31.1.aarch64 | SUSE Linux Enterprise Live Patching 15 SP6 -> kernel-livepatch-6_4_0-150600_23_70-default-0:12-150600.2.1.ppc64le | SUSE Linux Micro Extras 6.2 -> kernel-obs-build-0:6.12.0-160000.31.1.aarch64 | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_266-default-0:16-2.1.ppc64le | SUSE Linux Enterprise High Availability Extension 16.0 -> cluster-md-kmp-default-0:6.12.0-160000.31.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> cluster-md-kmp-default-0:6.12.0-160000.31.1.ppc64le | SUSE Linux Enterprise Live Patching 15 SP7 -> kernel-livepatch-6_4_0-150700_53_28-default-0:7-150700.2.1.ppc64le | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-29-default-0:19-1.2.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-30-default-0:18-1.2.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-31-default-0:18-1.2.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-32-default-0:12-1.1.s390x | SUSE Linux Enterprise Live Patching 15 SP7 -> kernel-livepatch-6_4_0-150700_53_34-default-0:4-150700.2.1.ppc64le | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-34-default-0:11-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-36-default-0:9-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-38-default-0:7-1.2.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-39-default-0:6-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-40-default-0:5-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-41-default-0:4-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-35-default-0:11-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-31-rt-0:18-1.2.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-33-rt-0:16-1.2.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-34-rt-0:16-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-35-rt-0:12-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-36-rt-0:11-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-37-rt-0:7-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-38-rt-0:7-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-39-rt-0:6-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-40-rt-0:5-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-41-rt-0:4-1.1.x86_64 | SUSE Linux Enterprise Live Patching 15 SP4 -> kernel-livepatch-5_14_21-150400_24_200-default-0:4-150400.2.1.ppc64le | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-30-rt-0:19-1.3.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-32-default-0:12-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-31-rt-0:18-1.2.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-33-rt-0:16-1.2.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-34-rt-0:16-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-35-rt-0:12-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-36-rt-0:11-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-37-rt-0:7-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-38-rt-0:7-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-39-rt-0:6-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-40-rt-0:5-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-41-rt-0:4-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-29-default-0:19-1.2.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-30-default-0:18-1.2.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-31-default-0:18-1.2.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-34-default-0:11-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-35-default-0:11-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-36-default-0:9-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-38-default-0:7-1.2.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-39-default-0:6-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-40-default-0:5-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-41-default-0:4-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-30-rt-0:19-1.3.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_29-rt-0:3-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_27-rt-0:5-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_28-rt-0:4-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_8-rt-0:7-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_7-rt-0:8-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_6-rt-0:10-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_30-rt-0:2-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_5-rt-0:11-160000.3.4.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_9-rt-0:7-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_30-default-0:2-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_8-default-0:8-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_6-default-0:11-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_28-default-0:4-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_9-default-0:7-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_29-default-0:3-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_27-default-0:5-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_26-rt-0:6-160000.1.1.x86_64 | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_7-default-0:9-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_5-default-0:13-160000.4.3.ppc64le | SUSE Linux Enterprise Live Patching 15 SP6 -> kernel-livepatch-6_4_0-150600_23_78-default-0:7-150600.2.1.ppc64le | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_302-default-0:3-2.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_30-default-0:2-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_8-default-0:8-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_6-default-0:11-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_28-default-0:4-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_9-default-0:7-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_29-default-0:3-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_27-default-0:5-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_7-default-0:9-160000.1.1.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_5-default-0:13-160000.4.3.ppc64le | SUSE Linux Enterprise Server 16.0 -> kernel-livepatch-6_12_0-160000_26-default-0:6-160000.1.1.ppc64le | SUSE Linux Micro 6.2 -> kernel-livepatch-6_12_0-160000_26-default-0:6-160000.1.1.ppc64le | SUSE Linux Enterprise Live Patching 12 SP5 -> kgraft-patch-4_12_14-122_299-default-0:4-2.1.ppc64le | SUSE Linux Enterprise Live Patching 15 SP4 -> kernel-livepatch-5_14_21-150400_24_209-default-0:2-150400.2.1.ppc64le | Open Enterprise Server 25.4 -> kernel-64kb-0:6.4.0-150700.53.55.1.aarch64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-42-default-0:3-1.1.s390x | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-42-rt-0:3-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-43-rt-0:2-1.1.x86_64 | SUSE Linux Micro 6.0 -> kernel-livepatch-6_4_0-43-default-0:2-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-42-default-0:3-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-43-default-0:2-1.1.s390x | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-42-rt-0:3-1.1.x86_64 | SUSE Linux Micro 6.1 -> kernel-livepatch-6_4_0-43-rt-0:2-1.1.x86_64 | openSUSE Tumbleweed -> kernel-devel-0:7.0.11-1.1.aarch64 | openSUSE Leap 16.0 -> cluster-md-kmp-64kb-0:6.12.0-160000.31.1.aarch64 | linux -> 6.1.174-1 | linux -> 7.0.9-1 | linux -> 6.12.90-1

Affected versions

  • linux kernel>= 3.9 <= 5.10.257>= 5.11 < 5.15.208>= 5.16 < 6.1.174>= 6.2 < 6.6.141>= 6.7 < 6.12.91>= 6.13 < 6.18.33>= 6.19 < 7.0.107.1

Remediation

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Fixed versions from NVD.

Evidence

Each value with its source
MeasureValueSource
CVSS base scoreHow severe the flaw is in itself. It does not say how likely an attack is. 7.8 NVD
FIRST EPSSFIRST's estimate of the chance this is exploited in the next 30 days, and how that ranks against all CVEs. 0.102 (95.7th pctl) FIRST EPSS
Actively exploitedWhether a source of record has confirmed attacks using it in the wild. Confirmed CISA KEV
Ransomware campaign useWhether CISA has seen ransomware operators use it. Unknown or none CISA KEV
CISA remediation deadlineThe date US federal agencies must have fixed or mitigated it. 2026-10-31 · CISA federal deadline in 3 days CISA KEV
Public exploit moduleA module existing is not the same as active exploitation. Public module exists Metasploit
EUVD cross-referenceENISA's record: CVSS 7.8 (v3.1), assigned by Linux. Listed ENISA EUVD

Description

NVD

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.

What CISA says to do

Public module

Metasploit lists a public great-rank module for this CVE: Fragnesia LPE (CVE-2026-46300) (linux/local/cve_2026_46300_fragnesia). A module existing is not the same as active exploitation; see metasploit.com.