Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-46331— net/sched: fix pedit partial COW leading to page cache corruption

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

linux是美国Linux基金会开源的一个操作系统内核。 Linux kernel 5.18版本存在安全漏洞，该漏洞源于pedit部分COW导致页缓存损坏，可能影响系统完整性。以下版本受到影响：4.19.244版本至4.20之前版本、5.4.195版本至5.5之前版本、5.10.117版本至5.11之前版本、5.15.41版本至5.16之前版本、5.17.9版本至5.18之前版本和5.18版本。

CVSS 7.8 · High EPSS 0.58% · P47

Possible ATT&CK Techniques 1 AI

T1200 · Hardware Additions

Affected Version Matrix 26

VendorProduct Version RangeStatus
Linux Linux abe35bf3be51482593076d516a680d79e5fbc8e1< 544d857b42a1734b923040e13aa61a6fd4746cf2 affected
b773640d5bb9e2acfd91e2695717af04d47aa116< d5d01d35a5a7d36f7cb679b67d9cbdd5205672dc affected
8b796475fd7882663a870456466a4fb315cc1bd6< a071e057518decc5e3bec89855758f5f8786f2c5 affected
8b796475fd7882663a870456466a4fb315cc1bd6< b685d6ef6f07a3b5ce814565a25f39f2157538a5 affected
8b796475fd7882663a870456466a4fb315cc1bd6< 2bec122b9fb91507a758ab5e3e5c4fbe7cb3f61b affected
8b796475fd7882663a870456466a4fb315cc1bd6< b198ed4e52580a7238c7c7082f03906f8b310313 affected
8b796475fd7882663a870456466a4fb315cc1bd6< 3dee9d0c198faeb95d052c1b94c2958751a28512 affected
8b796475fd7882663a870456466a4fb315cc1bd6< 899ee91156e57784090c5565e4f31bd7dbffbc5a affected
… +18 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-46331

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net/sched: fix pedit partial COW leading to page cache corruption
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account for the runtime header offset added by typed keys. This can leave part of the write region un-COW'd. Fix by moving skb_ensure_writable() inside the per-key loop where the actual write offset is known, and add overflow checking on the offset arithmetic. For negative offsets (e.g. Ethernet header edits at ingress), use skb_cow() to COW the headroom instead. Guard offset_valid() against INT_MIN, where negation is undefined.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
linux是美国Linux基金会开源的一个操作系统内核。 Linux kernel 5.18版本存在安全漏洞，该漏洞源于pedit部分COW导致页缓存损坏，可能影响系统完整性。以下版本受到影响：4.19.244版本至4.20之前版本、5.4.195版本至5.5之前版本、5.10.117版本至5.11之前版本、5.15.41版本至5.16之前版本、5.17.9版本至5.18之前版本和5.18版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux abe35bf3be51482593076d516a680d79e5fbc8e1 ~ 544d857b42a1734b923040e13aa61a6fd4746cf2 -
Linux Linux 5.18 -

II. Public POCs for CVE-2026-46331

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-46331

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-46331 (6)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-46331

No comments yet

Leave a comment