VulnSocial

CVE-2026-46266Patch(linux / linux_kernel)

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTO_RAW (255) was dangerous. socket(AF_INET, SOCK_RAW, 255); A malicious incoming ICMP packet can set the protocol field to 255 and match this socket, leading to FNHE cache changes. inner = IP(src="192.168.2.1", dst="8.8.8.8", proto=255)/Raw("TEST") pkt = IP(src="192.168.1.1", dst="192.168.2.1")/ICMP(type=3, code=4, nexthopmtu=576)/inner "man 7 raw" states: A protocol of IPPROTO_RAW implies enabled IP_HDRINCL and is able to send any IP protocol that is specified in the passed header. Receiving of all IP protocols via IPPROTO_RAW is not possible using raw sockets. Make sure we drop these malicious packets.

linux CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-06-04)
  • 3 total mentions across 2 days

Affected systems

Vendors
linux
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-03: 1Mentions · 2026-06-04: 2Patch / Workaround · 2026-06-04: 2Technical Details · 2026-06-04: 206-0306-04
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-031
General1
2026-06-042
Patch2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-46266 In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply hav… https://www.cve.org/CVERecord?id=CVE-2026-46266 ----- Traducción: CVE-2026-46266 En … http://infoflow.cloud`

    Post summary

    The tweet indicates that CVE-2026-46266, affecting RAW sockets in the Linux kernel, has been resolved—with a patch applied—while providing minimal technical detail and no exploitation or PoC information.

    0000041
    79 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-46266 In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply hav… https://www.cve.org/CVERecord?id=CVE-2026-46266

    Post summary

    The CVE‑2026‑46266 vulnerability affecting Linux RAW sockets has been patched, with a brief technical description provided and a link to the official CVE record. No evidence of exploitation or PoC is reported.

    00000318
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-46266 Linux Kernel IPPROTO_RAW Socket ICMP Packet Handling Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46266

    Post summary

    The post lists the CVE identifier and a brief description of a Linux kernel socket handling vulnerability, but provides no further technical details, PoC, exploit code, or mitigation information.

    0000047
    4.0K followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities