{"revision":"fb7fc0f0dad946a997d5237d43e169f1","evidence":{"cve":"CVE-2026-46300","kev":{"cve":"CVE-2026-46300","product":"Kernel","name":"Linux Kernel Missing Initialization of a Variable Vulnerability","dateAdded":"2026-10-28","dueDate":"2026-10-31","knownRansomwareUse":false,"shortDescription":"Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.","vendor":"Linux","isMicrosoft":false,"products":[],"advisoryUrl":"https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46300","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-46300"},"epss":null,"observedAt":"2026-10-28T19:52:43.610225+00:00","kevRetained":false,"reviewIdentity":"b7ee0f52f9c06282b550b467"}}