Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver doesn't limit the number of nodes it handles. This can be an attack vector if a malicious client starts registering random nodes, leading to memory exhaustion. Hence, limit the maximum number of nodes to 64. Note that, limit of 64 is chosen based on the current platform requirements. If requirement changes in the future, this limit can be increased.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.7, < 6.6.140 |
References
- https://git.kernel.org/stable/c/27d5e84e810b0849d08b9aec68e48570461ce313Patch
- https://git.kernel.org/stable/c/4665a29c08e1b36bc9db4814f9dde3d23e8fd1b0Patch
- https://git.kernel.org/stable/c/4c46413661431aa60fb134cd4ecdf8beaa39f824Patch
- https://git.kernel.org/stable/c/5cf6d5e5e3b804a44692fbf548a5179442e2e923Patch
- https://git.kernel.org/stable/c/8022876894d09ae485b499058c3357da683bcc5dPatch
- https://git.kernel.org/stable/c/823310645065bd49666e84af689fa95192819f55
- https://git.kernel.org/stable/c/b703ee903b24974aca4bde99c7d25d66309d35dd
- https://git.kernel.org/stable/c/ed29887286aba96d1930f4ddb9f235f6b421073c
FAQ
What is CVE-2026-46003?
CVE-2026-46003 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver doesn't limit the number of nodes it handles. This can be...
How severe is CVE-2026-46003?
CVE-2026-46003 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-46003?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.