CVE-2026-46142

MediumCVSS 5.5/10Last modified Jun 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: libwx: fix VF illegal register access

Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang.

When the device is VF, the bus function ID can be obtained directly from the PCI_FUNC(pdev->devfn).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d4187ec2641061748480cdc944fd07653fad50d5, < d3bd8040497968f6f5470018724ef7b0df92f707; >= f0b3ecdbb5bbee8ca6b2892aba3988c8a3ce858e, < f6e656f7cea16b638675a2ab7d7e4cf2516c5eb0; >= a04ea57aae375bdda1cb57034d8bcbb351e1f973, < 33c5bb50b9c40e8451e6aec4487a31d794b98d92; >= a04ea57aae375bdda1cb57034d8bcbb351e1f973, < 68a007a701bc06fa426507c551ef12514f2e721d; >= a04ea57aae375bdda1cb57034d8bcbb351e1f973, < 694de316f607fe2473d52ca0707e3918e72c1562; 93e52b75f11a8f39b22993ae315b5b9a6b2668a3; >= 6.6.117, < 6.6.140; >= 6.12.58, < 6.12.88; >= 6.17.8, < 6.18
LinuxLinux6.18

References

Timeline

Published
May 28, 2026
Last modified
Jun 24, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-461435.5In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare can bCVE-2026-461445.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Sashiko points CVE-2026-461457.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_keCVE-2026-461465.5In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() ThCVE-2026-461475.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()CVE-2026-461485.5In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IPCVE-2026-461497.1In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_shoCVE-2026-46157.3A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. SCVE-2026-461507.1In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_saCVE-2026-461515.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usCVE-2026-461528.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_iCVE-2026-461535.5In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings vlan_dev_set_egress_priority
CVE-2026-46142: Medium severity, CVSS 5.5 | Vulnix