Dashboard / CVE-2026-46300

CVE-2026-46300

HIGH CISA KEV 15 PoCs
ACT NOW Priority: 0.79 BB Relevance: 53/100
Published: 2026-05-23 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel
Date Added 2026-10-28
Remediation Due 2026-10-31
This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

Weakness Classification (3)

Affected Software (76)

VendorProductVersion
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3599e6b3cc1ada96883d496a50a210d3afbb6987
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 78bf6b6bb19541d19fbda6242e7cfe2c682763c0
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3bd9e113d50034db99d7ef69fd8e5242d15e414a
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3884358a9286b17f389a72b1426fc4547c23c111
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < f84eca5817390257cef78013d0112481c503b4a3
Linux Linux 3.9
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3599e6b3cc1ada96883d496a50a210d3afbb6987
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 78bf6b6bb19541d19fbda6242e7cfe2c682763c0
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3bd9e113d50034db99d7ef69fd8e5242d15e414a
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3884358a9286b17f389a72b1426fc4547c23c111
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < f84eca5817390257cef78013d0112481c503b4a3
Linux Linux 3.9
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3599e6b3cc1ada96883d496a50a210d3afbb6987
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 78bf6b6bb19541d19fbda6242e7cfe2c682763c0
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3bd9e113d50034db99d7ef69fd8e5242d15e414a
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3884358a9286b17f389a72b1426fc4547c23c111
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < f84eca5817390257cef78013d0112481c503b4a3
Linux Linux 3.9
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3599e6b3cc1ada96883d496a50a210d3afbb6987
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
Linux Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
Showing 30 of 76 entries

References & Advisories (51)

Showing 25 of 51 references

Proof of Concept (15)

★ 16
https://github.com/0xBlackash/CVE-2026-46300
nomi-sec
★ 3
https://github.com/MadExploits/CVE-2026-46300
nomi-sec
★ 2
https://github.com/HORKimhab/CVE-2026-46300
nomi-sec
★ 2
https://github.com/azilRababe/CVE-2026-46300
nomi-sec
★ 1
https://github.com/Sentebale/CVE-2026-46300
nomi-sec
★ 1
https://github.com/1neptune/Fragnesia
nomi-sec
—
https://github.com/ExploitEoom/CVE-2026-46300
nomi-sec
—
https://github.com/First-John/cve_2026_frag_family_fix
nomi-sec
—
https://github.com/Koshmare-Blossom/Fragnesia-go
nomi-sec
—
https://github.com/Maxime288/Fragnesia-CVE-2026-46300
nomi-sec
—
https://github.com/nonameuserosint-hue/Fragnesia-go
nomi-sec
—
https://github.com/AzDevops143/FRAGNESIA-Charan-cve-2026-46300
nomi-sec
—
https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project
nomi-sec
—
https://github.com/Kentox493/CVE-2026-46300_Fragnesia
nomi-sec
—
https://github.com/porcumarcooo/THM-CVE-2026-46300-Fragnesia-Exploit
nomi-sec

Bug Bounty Relevance

53 / 100
✓ Low complexity
✓ No user interaction
✓ PoC available (15)
✓ Known exploited (KEV)

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

10.19%
Raw Score 0.101920
Percentile 95.7%
Date 2026-10-28

Intelligence Sources

kev ref →
mitre ref →
nvd ref →

External Links