{"vulnerability": "CVE-2026-46243", "sightings": [{"uuid": "b6b95673-48d3-4805-8b1d-bd998a642f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "published-proof-of-concept", "source": "Telegram/KFeguXINVuTNqz_8DQtQvXbwdcsarR0hPsZej5KOptLSOJk", "content": "", "creation_timestamp": "2026-08-05T00:00:55.620033Z"}, {"uuid": "8c82c86c-847e-4366-aec1-a52d151d3408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "published-proof-of-concept", "source": "Telegram/KFeguXINVuTNqz_8DQtQvXbwdcsarR0hPsZej5KOptLSOJk", "content": "", "creation_timestamp": "2026-08-04T05:00:04.991738Z"}, {"uuid": "a81f21b0-1469-48b3-88dc-8c05c6e6180c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116676120156561133", "content": "CIFSwitch has been assigned CVE-2026-46243.", "creation_timestamp": "2026-06-01T17:51:47.139317Z"}, {"uuid": "5a4cc09a-a0f0-4a9b-8d16-a17042e881a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/ifin-intel.org/post/3mnanqg7sy22p", "content": "This has been assigned CVE-2026-46243. No word on distro patches yet.", "creation_timestamp": "2026-06-01T17:57:16.811694Z"}, {"uuid": "e271e186-ee1f-4a04-8d57-a4ae68752fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mncb3vpmgk2p", "content": "\ud83e\uddf5 Un investigador armat amb un framework d'IA ha descobert una vulnerabilitat cr\u00edtica al kernel Linux que permet escalar a root. El codi vulnerable portava 19 anys amagat.\nEl bug: CVE-2026-46243, \"CIFSwitch\"\nheyitsas.im/posts/cifswi...", "creation_timestamp": "2026-06-02T09:16:28.928054Z"}, {"uuid": "ea3b4bc3-9785-420c-8287-e5c867fb3e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mncb426gqk2p", "content": "\ud83e\uddf5 Un investigador armat amb un framework d'IA ha descobert una vulnerabilitat cr\u00edtica al kernel Linux que permet escalar a root. El codi vulnerable portava 19 anys amagat.\nEl bug: CVE-2026-46243, \"CIFSwitch\"\nheyitsas.im/posts/cifswi...", "creation_timestamp": "2026-06-02T09:16:29.447266Z"}, {"uuid": "c2ae525b-7503-46c6-878a-75592054b21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mncb426ip22p", "content": "\ud83e\uddf5 Un investigador armat amb un framework d'IA ha descobert una vulnerabilitat cr\u00edtica al kernel Linux que permet escalar a root. El codi vulnerable portava 19 anys amagat.\nEl bug: CVE-2026-46243, \"CIFSwitch\"\nheyitsas.im/posts/cifswi...", "creation_timestamp": "2026-06-02T09:16:32.287195Z"}, {"uuid": "1d4e4fa1-4609-43c2-989b-9740b93cca10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mncb426knk2p", "content": "\ud83e\uddf5 Un investigador armat amb un framework d'IA ha descobert una vulnerabilitat cr\u00edtica al kernel Linux que permet escalar a root. El codi vulnerable portava 19 anys amagat.\nEl bug: CVE-2026-46243, \"CIFSwitch\"\nheyitsas.im/posts/cifswi...", "creation_timestamp": "2026-06-02T09:16:32.932003Z"}, {"uuid": "cd8b8146-114d-41f0-a454-f721608afe5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/dju.eurosky.social/post/3mndcnk4kgs2s", "content": "il s'agit du CVE-2026-46243\n\u00e0 noter que sous debian, c'est deja corrig\u00e9 depuis belle lurette avec le kernel 6.12.90-2 :]\nsecurity-tracker.debian.org/tracker/CVE-...", "creation_timestamp": "2026-06-02T19:16:48.522083Z"}, {"uuid": "bbabaaf0-28ca-4103-87f2-cfa22fdb62e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "Telegram/0RWgeXgDd8FuhlsxGHTZmZulVERW9VznQ2KUM8It_wSr4u8", "content": "", "creation_timestamp": "2026-06-02T15:00:17.000000Z"}, {"uuid": "304519d8-8919-4498-a283-1e60384cb5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "Telegram/hGWk8MIih0D3DxUwNWRe3y8KubP65D3PuLH-MA53N78330U", "content": "", "creation_timestamp": "2026-06-02T15:00:07.000000Z"}, {"uuid": "387a0c42-71dc-40c5-b12a-5e4473ceded0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/nidouille.bsky.social/post/3mndovyarrs2x", "content": "Une faille kernel de plus non corrig\u00e9e, cette fois si c'est via CIFS/SMB, elle porte la r\u00e9f\u00e9rence CVE-2026-46243 et a une note de 7.8.\n\nPas de panique, il faut avoir la bonne version de cifs-utils pour l'utiliser.\n\nnext.ink/240221/cifsw...", "creation_timestamp": "2026-06-02T22:56:16.961361Z"}, {"uuid": "036312a4-0454-4c0e-a7af-1df01ddb4c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mndwgq7l4bt2", "content": "CIFSwitch - CVE-2026-46243 Just released an open-source bash checker for CIFSwitch (CVE-2026-46243) \u2014 the 19-year-old Linux kernel LPE disclosed last week that lets any unprivileged local user ge...\n\n#linux #containers #security #devops\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-03T01:10:59.905996Z"}, {"uuid": "73f26a8b-8928-4477-8ee9-4162156943e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mne2wpe5722x", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 127 interactions\nCVE-2026-0257: 42 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-48595: 127 interactions\nCVE-2026-46243: 12 interactions\nCVE-2026-0257: 8 interactions\n", "creation_timestamp": "2026-06-03T02:31:25.963508Z"}, {"uuid": "39405fc9-db97-4a28-9844-97ad36b944d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mneqlt25s2e2", "content": "CIFSwitch (CVE-2026-46243): Mitigation and Kernel Update on CloudLinux Researcher Asim Manizada disclosed CIFSwitch , a Linux kernel local privilege escalation in the CIFS / SMB client's SPNEGO...\n\n#security #Vulnerability #kernel\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-03T08:59:10.701593Z"}, {"uuid": "6b09c9cb-12af-49e9-96ab-69ca86aedccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mnia53fj2x2a", "content": "Patched kernels for CIFSwitch (CVE-2026-46243) have been released to the production repositories/mirrors.\n\nThank you to everyone who helped verify these builds!\n\nLearn more: https://almalinux.org/blog/2026-05-28-cifswitch/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-06-04T18:15:07.043274Z"}, {"uuid": "44457d6b-68de-48f2-b025-1fbd8f5625f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "Telegram/CPbUVCa1pf4Qjq4uUdwwywq8NR3BB8xYTIxCaGULBME9cx4", "content": "", "creation_timestamp": "2026-06-03T03:00:05.000000Z"}, {"uuid": "eb595f56-ab6d-49ed-8180-4b47ba76af5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "Telegram/-ZaOSBs5QfE8Ryorjte0HRYdJ3XwemRFp0pA5mG04K2Sq_U", "content": "", "creation_timestamp": "2026-06-03T03:00:11.000000Z"}, {"uuid": "8119bb80-bf29-47a0-b67c-746b1ce0ca8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnlmbiipbo27", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 40 interactions\nCVE-2026-46243: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2015-5119: 20 interactions\nCVE-2020-0601: 20 interactions\nCVE-2026-20245: 6 interactions\n", "creation_timestamp": "2026-06-06T02:30:19.465411Z"}, {"uuid": "f163242b-0100-42eb-80f9-0db5f0443994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mnmprd4jsf2n", "content": "Greg Kroah-Hartman released seven stable kernels at once: 7.0.11, 6.18.34, 6.12.92, 6.6.142, 6.1.175, 5.15.209, and 5.10.258. The standout is a fix for CVE-2026-46243, the \"CIFSwitch\" flaw that can be used for local privilege escalation. Which branch is your machine on?\n#kernel", "creation_timestamp": "2026-06-06T13:05:31.410666Z"}, {"uuid": "aa788d54-6c89-41df-ba6f-bddf9c2aa112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mno4rl7b6j2a", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 26 interactions\nCVE-2026-46243: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50259: 5 interactions\nCVE-2026-50260: 5 interactions\nCVE-2026-50261: 5 interactions\n", "creation_timestamp": "2026-06-07T02:30:58.505368Z"}, {"uuid": "76a661f8-35c0-44a9-9ff3-d32332866bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnqnav4zj726", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-46243: 23 interactions\nCVE-2015-5119: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4372: 4 interactions\nCVE-2022-0492: 3 interactions\nCVE-2026-3300: 3 interactions\n", "creation_timestamp": "2026-06-08T02:31:11.594383Z"}, {"uuid": "86db384c-b2bc-4823-affa-ba52d3d70a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3moo77zrlwz25", "content": "CIFSwitch (CVE-2026-46243) patched kernels are now in production for AlmaLinux 8, 9, and 10\u2014verified by our community before release. https://almalinux.org/blog/2026-05-28-cifswitch/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-06-19T20:40:02.433401Z"}, {"uuid": "1248d1dd-2138-45f9-8d46-e4ec48f6dc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpbvntspjk2c", "content": "\ud83d\udea8 CRITICAL FLAW: 'CIFSwitch' (CVE-2026-46243), a 19-year-old Linux kernel bug, allows instant root access on Ubuntu & RHEL with a single command. Patch immediately! This is the 5th Linux LPE this year. #Linux #infosec #CyberSecurity #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-27T16:42:03.455869Z"}, {"uuid": "8ca6edf9-156e-4482-b6a8-3fa34372d7f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsqlz7uo22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-46243 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DD745AF5-2F24-49B2-8BED-FBB098D43494", "creation_timestamp": "2026-07-01T15:16:31.631175Z"}, {"uuid": "bf04d6d5-b1fe-4fa4-9f49-2855fef9e398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:52:30.516952Z"}, {"uuid": "fba50aba-9ca9-4954-83d0-e7364830ca81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T07:15:19.834485Z"}, {"uuid": "378449bb-e15f-4b49-b908-ff4697d34f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppabbnjbu2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-46243 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/314BB245-20F8-434D-B539-3B9C1CE315E6", "creation_timestamp": "2026-07-02T23:56:29.102400Z"}, {"uuid": "0d81ff29-70a0-4b85-8e8c-738af0c2ffd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/472", "content": "CVE-2026-46243\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.spnego descriptions\n\ncifs.spnego key descriptions contain authority-bearing fields such as\npid, uid, creduid, and upcalltarget that cifs.upcall treats as\nkernel-originating inputs. However, userspace can also create keys of\nthis type through requestkey(2) or addkey(2), allowing those fields to\nbe supplied without CIFS origin.\n\nOnly accept cifs.spnego descriptions while CIFS is using its private\nspnegocred to request the key.", "creation_timestamp": "2026-08-28T00:00:38.552817Z"}, {"uuid": "43ffb040-a939-4e2c-8c65-6508cdc4f9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46243", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/472", "content": "CVE-2026-46243\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.spnego descriptions\n\ncifs.spnego key descriptions contain authority-bearing fields such as\npid, uid, creduid, and upcalltarget that cifs.upcall treats as\nkernel-originating inputs. However, userspace can also create keys of\nthis type through requestkey(2) or addkey(2), allowing those fields to\nbe supplied without CIFS origin.\n\nOnly accept cifs.spnego descriptions while CIFS is using its private\nspnegocred to request the key.", "creation_timestamp": "2026-08-27T15:00:04.867831Z"}]}