{"vulnerability": "cve-2026-46215", "sightings": [{"uuid": "a444859d-882a-4c6b-9688-d6f7b697d1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mpgjkues7s2o", "content": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215)\n\nStan Shaw published an article about exploiting UAF in a DRM GEM ioctl. The researcher reallocated freed memory as a pipe_buffer array to perform the Dirty Pipe attack.\n\ncyberstan.co.uk/drm-lpe-linux/", "creation_timestamp": "2026-06-29T12:49:04.085495Z"}, {"uuid": "79c5b41f-4199-4bc6-a42e-d09936d8efb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mpgjlgty6s2o", "content": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215)\n\nStan Shaw published an article about exploiting UAF in a DRM GEM ioctl. The researcher reallocated freed memory as a pipe_buffer array to perform the Dirty Pipe attack.\n\ncyberstan.co.uk/drm-lpe-linux/", "creation_timestamp": "2026-06-29T12:49:24.670789Z"}, {"uuid": "e1df7bb2-87ec-44c2-b902-c8f473a8ab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mph3gvbl7t2i", "content": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215)\nDiscussion | lobsters | Author: fro", "creation_timestamp": "2026-06-29T18:08:50.914035Z"}, {"uuid": "e6943163-162d-4848-8766-61dc04cc2bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mph3j2di5p2j", "content": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215) https://lobste.rs/s/hh5yyq #security #linux ", "creation_timestamp": "2026-06-29T18:10:36.582352Z"}, {"uuid": "6d0bead3-1013-4c32-976c-f85078c8f9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46215", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mplemj2a7k2v", "content": "Original text: \u201cUnprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215)\u201d \u2014 cyberstan, cyberstan.co.uk (12 April 2026). Code blocks and figures below are reproduce\nhttps://core-jmp.org/2026/07/unprivileged-root-via-use-after-free-in-linux-drm-gem-change_handle-cve-2026-46215/", "creation_timestamp": "2026-07-01T11:03:43.289292Z"}, {"uuid": "f4f34cf7-900f-4b54-9e8e-0c4ba3def16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/alexandreborges.bsky.social/post/3mpm76d62fs2e", "content": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215):\n\ncyberstan.co.uk/drm-lpe-linux/\n\n#linux #kernel #vulnerability #cybersecurity #exploitation", "creation_timestamp": "2026-07-01T19:02:52.148153Z"}, {"uuid": "df63485b-2457-4dcd-9ab0-c321a2977117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/116846270110180154", "content": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215):\nhttps://cyberstan.co.uk/drm-lpe-linux/\n#linux #kernel #vulnerability #cybersecurity #exploitation", "creation_timestamp": "2026-07-01T19:03:09.237002Z"}, {"uuid": "5a261938-85c9-4e4a-aa25-3140240ee834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpmqv43jhn24", "content": "CVE-2026-46215: The Unprivileged Root via a DRM UAF That Bypasses KASAN +\u00a0Video\n\nIntroduction: In a concerning development for Linux security, a high-severity use-after-free (UAF) vulnerability in the Direct Rendering Manager (DRM) subsystem has been uncovered, tracked as CVE-2026-46215. This flaw,\u2026", "creation_timestamp": "2026-07-02T00:15:55.907175Z"}, {"uuid": "33e08ed0-1152-486c-8a6b-da4c07f98846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7ngesw7j2d", "content": "Public PoC and write-up detail a Linux kernel privilege escalation flaw (CVE-2026-46215) in DRM GEM. A local user gets root in ~99% of runs.\n\n#Linux #KernelSecurity #CVE202646215 #PrivilegeEscalation #DRM", "creation_timestamp": "2026-07-09T12:34:35.430523Z"}, {"uuid": "f04999af-3a44-42d7-a046-52efe8d13910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mq7xi74m2o2b", "content": "Linux kernel flaw CVE-2026-46215 allowed root access via DRM nodes; patched May 2026. #LinuxKernel #Security #CVE202646215 #DRM #RootAccess #CyberSecurity thedailytechfeed.com/linux-kernel...", "creation_timestamp": "2026-07-09T15:34:33.602005Z"}, {"uuid": "a9f4f027-3b2c-4810-96a9-788d9fc131cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1959", "content": "", "creation_timestamp": "2026-07-10T08:45:02.508239Z"}, {"uuid": "725449bd-6db2-4c22-a524-4fecfd4245ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://t.me/GithubRedTeam/93003", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-EXPLOIT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bluedragonsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 16:19:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is and exploit for CVE-2026-46215 (Linux Kernel Use After Free) Adapted for Linux 7.0 !!! by Antonius (ev1lut10n / sw0rdm4n)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.671034Z"}, {"uuid": "dabf817a-7015-4c65-89bb-3456e291054e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://t.me/GithubRedTeam/89480", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 14:40:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:23.741733Z"}, {"uuid": "7877760d-6763-44f3-b69c-716e9ce29369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93003", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-EXPLOIT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bluedragonsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 16:19:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is and exploit for CVE-2026-46215 (Linux Kernel Use After Free) Adapted for Linux 7.0 !!! by Antonius (ev1lut10n / sw0rdm4n)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.225134Z"}, {"uuid": "b63c48ea-cce9-4f42-8d21-f14aaf51b20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "https://t.me/GithubRedTeam/89480", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 14:40:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:39.560000Z"}, {"uuid": "0fe9d951-f39e-4c93-b03b-3951143b099f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89480", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 14:40:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.702048Z"}, {"uuid": "290b46c6-0feb-41ef-bc09-7f53f272941b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-16T19:00:11.574166Z"}, {"uuid": "12919684-ec64-44df-ba77-57f58870a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-17T00:00:27.120715Z"}, {"uuid": "8f3c41a4-1a95-4a9a-848b-532a86af8a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "published-proof-of-concept", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-18T00:00:45.203941Z"}, {"uuid": "5b4a12af-eb52-4d19-986b-8ea7aa20aa46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94093", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-exploit-linux-7.0-uaf-stable\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bluedragonsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 05:42:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - by Antonius (sw0rdm4n, w1sdom, ev1lut10n)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-19T07:00:05.836951Z"}, {"uuid": "ea85158a-09f7-4855-8dd6-557982942724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94093", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46215-exploit-linux-7.0-uaf-stable\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bluedragonsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-19 05:42:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - by Antonius (sw0rdm4n, w1sdom, ev1lut10n)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T00:00:26.614698Z"}, {"uuid": "2da78c6a-25d4-4d38-93ec-9db84bb622c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls", "content": "", "creation_timestamp": "2026-07-20T18:00:05.367593Z"}, {"uuid": "4207c843-156c-4ac4-82fd-15cd91105f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "seen", "source": "Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls", "content": "", "creation_timestamp": "2026-07-21T00:00:32.406586Z"}, {"uuid": "877a9d59-93c0-4cc0-9008-0d7d91299580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46215", "type": "published-proof-of-concept", "source": "Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls", "content": "", "creation_timestamp": "2026-07-22T01:00:05.091083Z"}]}