VulnerabilitySANS NewsBites
Mitigate Fourth Linux Kernel Flaw Disclosed this Month
NEOSEC enrichment — no mirror of the original source
The latest in a series of flaws in the Linux kernel was disclosed by Qualys on May 15, 2026, in the Open Source Software Security list. CVE-2026-46333 allows a non-privileged attacker to read sensitive files by obtaining file descriptors th
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux Kernel: Sicherheitslücke
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Debian linux: security update
- CVE-2026-46333Linux kernel (Azure FIPS) vulnerabilities
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logic
- CVE-2026-46333Debian linux: security update
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CVE-2026-46333In the Linux kernel, the following vulnerability has been resolved:
Affected vendors and products
More on Mitigate
Other advisories
- HighCVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUs
- Not ratedosv:CVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUs
- HighCVE-2026-33376When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate …
- HighCVE-2026-43048HID: core: Mitigate potential OOB by removing bogus memset()
- Not ratedosv:CVE-2026-43048HID: core: Mitigate potential OOB by removing bogus memset()
- Not ratedosv:ECHO-776a-c85c-3da5This vulnerability is only applicable in scenarios in which a terminal emulator with improper handling of escape codes; Terminal emulators in Echo's images employ proper escaping and sanitization to mitigate such risks. https://ubuntu.com/security/CVE-2018-1000021#notes https://security-tracker.debian.org/tracker/CVE-2018-1000021
- Not ratedosv:ECHO-3e1f-5d01-40deThe issue is mitigated by Debian's default policies for imagemagic. The two required policies detailed by the github issue are present in Debian's policy.xml. https://github.com/ImageMagick/ImageMagick/issues/1255
- HighCVE-2025-37963arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Other news entries
- OpenAI’s August fix for theft of reasoning traces was quickly bypassedNewsCSO Online
- ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksNewsBleepingComputer
- New npm malware finds a way around install script defensesNewsCSO Online
- Cisco searched for IOS XR bugs and found so many it rolled them into an update releaseNewsThe Register — Security
- Microsoft Patches 22 Vulnerabilities, Including Critical RCE Flaw in Entra IDVulnerabilitySANS NewsBites
- Global Threat Campaign Hits Critical VMware vCenter FlawNewsDark Reading
- DDoS attacks over 1 Tbps surged fivefold in the second quarterNewsBleepingComputer
- Security leaders’ rogue AI confidence could actually be disastrousNewsCSO Online
Source: https://www.knightli.com/
ID