CVE-2026-46005

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-27 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix a resource leak in xfs_alloc_buftarg() In the error path, call fs_put_dax() to drop the DAX device reference.

Weakness Classification (1)

Affected Software (8)

VendorProductVersion
Linux Linux 6f643c57d57c56d4677bc05f1fca2ef3f249797c < ed2d6442e61169e565727ba15c4f6a0cb5ce16df
Linux Linux 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 82fb9da6477d08bdab954dc7bc081a41f2f9cae6
Linux Linux 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 28a6c132b8c6e5eeefa889c4fb43d65b12989d48
Linux Linux 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5c293a1e1ef0f838772d20ae8afae4cbd87cd3f9
Linux Linux 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 5804cb507233ed767a83ac70527b2f6c4566ec75
Linux Linux 6f643c57d57c56d4677bc05f1fca2ef3f249797c < 29a7b2614357393b176ef06ba5bc3ff5afc8df69
Linux Linux 6.0
linux linux_kernel 6.0 – 6.6.140

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001280
Percentile 2.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00128
2026-11-12
0.00128
2026-11-10
0.00128
2026-11-09
0.00128
2026-11-08
0.00128
2026-11-07
0.00128
2026-11-06
0.00128

Intelligence Sources

mitre ref →
nvd ref →