CVE-2026-46315Patch(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields in struct io_waitid::info and later copies them to userspace siginfo. The prep path initializes the request arguments, but it does not initialize info itself. If the wait operation completes without reporting a child event, the common wait code can return without writing wo_info. In that case io_waitid_finish() still copies iw->info to userspace, exposing stale bytes from the reused io_kiocb command storage. Clear the result storage during prep so the io_uring path matches the regular waitid syscall, which uses a zero-initialized struct waitid_info.

linux CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

linux_kernel

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-06-09); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

linux

Products

linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Patch

250.0%

Disclosure

125.0%

General

125.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	3	Disclosure1Patch2
2026-06-17	1	General1

Full discourse4 posts

𝚔𝚒𝚖𝚖𝚢.𝚣𝚒𝚙 🅅 👊🇺🇸🔥@kimmydotzip128d
General
@encrypted_past Looks like the kernel team did: https://lore.kernel.org/all/20260516184709.852814-1-gganji11@naver.com/ https://nvd.nist.gov/vuln/detail/CVE-2026-46315 It's a strat companies use to insert themselves into the CVE process for yeah, that. I didn't realize the kernel team became a CNA until just now tho: http://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/ https://t.co/BCiZoImlp0
Post summary
The tweet highlights the existence of CVE-2026‑46315 and points to a kernel mailing list thread and the NVD entry, but offers no additional technical details or actionable information.
200921.5K
9.3K followersView on X
Infoflowcloud@infoflowcloud136d
Patch
🚨*CVE* CVE-2026-46315 In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its re… https://www.cve.org/CVERecord?id=CVE-2026-46315 ----- Traducción: CVE-2026-46315 En … http://infoflow.cloud`
Post summary
CVE-2026-46315 in the Linux kernel has been fixed by clearing waitid information before copying to userspace, with technical details and patch status provided but no exploit or PoC disclosed.
0000027
79 followersView on X
CVE@CVEnew136d
Patch
CVE-2026-46315 In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its re… https://www.cve.org/CVERecord?id=CVE-2026-46315
Post summary
CVE-2026-46315 is a Linux kernel flaw involving io_uring’s waitid handling that has been resolved; the post confirms its fix but provides no PoC, exploit, or explicit patch details.
00000191
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-46315 Information Disclosure in Linux Kernel io_uring WAITID Operation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46315
Post summary
The post references CVE-2026-46315, an information disclosure flaw in Linux Kernel io_uring WAITID, without any PoC, exploit, patch, or active exploitation details.
0000038
4.0K followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	linux	linux_kernel	-	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-
OS	linux	linux_kernel	7.1	-	-

Explore more

Back to dashboard linux CVEs linux_kernel vulnerabilities

What researchers are saying

CVE-2026-46315

𝚔𝚒𝚖𝚖𝚢.𝚣𝚒𝚙 🅅 👊🇺🇸🔥[verified]@kimmydotzipGeneral

The tweet highlights the existence of CVE-2026‑46315 and points to a kernel mailing list thread and the NVD entry, but offers no additional technical details or actionable information.

Infoflowcloud@infoflowcloudPatch

CVE-2026-46315 in the Linux kernel has been fixed by clearing waitid information before copying to userspace, with technical details and patch status provided but no exploit or PoC disclosed.

CVE@CVEnewPatch

CVE-2026-46315 is a Linux kernel flaw involving io_uring’s waitid handling that has been resolved; the post confirms its fix but provides no PoC, exploit, or explicit patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post references CVE-2026-46315, an information disclosure flaw in Linux Kernel io_uring WAITID, without any PoC, exploit, patch, or active exploitation details.