Linux kernel uninitialized variable flaw leads to root, exploited

high severity · exploited in the wild · published 2026-05-23

A missing initialization in the kernel networking code can let an attacker alter data in the page cache. It is already used in the wild, chained with other flaws, to plant web shells and run commands as root.

Fixed in: 7.0.10

CVE: CVE-2026-46300

Source: OSV

Am I affected?

You are affected if the installed version is older than 7.0.10. Check the version you have and update to 7.0.10 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1873 and your operating system.