GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46285 (GCVE-0-2026-46285)

Vulnerability from cvelistv5 – Published: 2026-06-08 15:41 – Updated: 2026-06-14 18:06
VLAI
Title
mtd: docg3: fix use-after-free in docg3_release()
Summary
In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() In docg3_release(), the docg3 pointer is obtained from cascade->floors[0]->priv before the loop that calls doc_release_device() on each floor. doc_release_device() frees the docg3 struct via kfree(docg3) at line 1881. After the loop, docg3->cascade->bch dereferences the already-freed pointer. Fix this by accessing cascade->bch directly, which is equivalent since docg3->cascade points back to the same cascade struct, and is already available as a local variable. This also removes the now-unused docg3 local variable.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < 8408655ec8344511667b61d8257dc59c80ee3391 (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < f5d2ed4ed47d3906e2495a3537a48b127f497a17 (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < 2bf706fe7831b319f23a85b9728f961cfed40c3e (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < d26f8c361f751c188b7ebaf8189aa0258968fd98 (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < 16f6588a3b7a2a20d10ad9b766be74c60ba347cc (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < d89044889ecd11b0c2f86663597246e9bdd25679 (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < d49628d63d4e6bbc8a1621afb88e5fc901611bee (git)
Affected: c8ae3f744ddca0da164bcacee42d1d4b6fe7027d , < ca19808bc6fac7e29420d8508df569b346b3e339 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.8
Unaffected: 0 , < 5.8 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.86 , ≤ 6.12.* (semver)
Unaffected: 6.18.27 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/mtd/devices/docg3.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8408655ec8344511667b61d8257dc59c80ee3391",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "f5d2ed4ed47d3906e2495a3537a48b127f497a17",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "2bf706fe7831b319f23a85b9728f961cfed40c3e",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "d26f8c361f751c188b7ebaf8189aa0258968fd98",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "16f6588a3b7a2a20d10ad9b766be74c60ba347cc",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "d89044889ecd11b0c2f86663597246e9bdd25679",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "d49628d63d4e6bbc8a1621afb88e5fc901611bee",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            },
            {
              "lessThan": "ca19808bc6fac7e29420d8508df569b346b3e339",
              "status": "affected",
              "version": "c8ae3f744ddca0da164bcacee42d1d4b6fe7027d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/mtd/devices/docg3.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.8"
            },
            {
              "lessThan": "5.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: docg3: fix use-after-free in docg3_release()\n\nIn docg3_release(), the docg3 pointer is obtained from\ncascade-\u003efloors[0]-\u003epriv before the loop that calls\ndoc_release_device() on each floor. doc_release_device() frees the\ndocg3 struct via kfree(docg3) at line 1881. After the loop,\ndocg3-\u003ecascade-\u003ebch dereferences the already-freed pointer.\n\nFix this by accessing cascade-\u003ebch directly, which is equivalent\nsince docg3-\u003ecascade points back to the same cascade struct, and\nis already available as a local variable. This also removes the\nnow-unused docg3 local variable."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T18:06:23.744Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8408655ec8344511667b61d8257dc59c80ee3391"
        },
        {
          "url": "https://git.kernel.org/stable/c/f5d2ed4ed47d3906e2495a3537a48b127f497a17"
        },
        {
          "url": "https://git.kernel.org/stable/c/2bf706fe7831b319f23a85b9728f961cfed40c3e"
        },
        {
          "url": "https://git.kernel.org/stable/c/d26f8c361f751c188b7ebaf8189aa0258968fd98"
        },
        {
          "url": "https://git.kernel.org/stable/c/16f6588a3b7a2a20d10ad9b766be74c60ba347cc"
        },
        {
          "url": "https://git.kernel.org/stable/c/d89044889ecd11b0c2f86663597246e9bdd25679"
        },
        {
          "url": "https://git.kernel.org/stable/c/d49628d63d4e6bbc8a1621afb88e5fc901611bee"
        },
        {
          "url": "https://git.kernel.org/stable/c/ca19808bc6fac7e29420d8508df569b346b3e339"
        }
      ],
      "title": "mtd: docg3: fix use-after-free in docg3_release()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46285",
    "datePublished": "2026-06-08T15:41:28.566Z",
    "dateReserved": "2026-05-13T15:03:33.110Z",
    "dateUpdated": "2026-06-14T18:06:23.744Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46285",
      "date": "2026-09-16",
      "epss": "0.00126",
      "percentile": "0.02601"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-24T02:43:33.000Z",
      "cve": "CVE-2026-46285",
      "id": "msrc_CVE-2026-46285",
      "initial_release_date": "2026-06-02T00:00:00.000Z",
      "product_status:known_not_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "mtd: docg3: fix use-after-free in docg3_release()",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46285.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46285\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-08T17:16:46.347\",\"lastModified\":\"2026-07-23T08:10:00.137\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmtd: docg3: fix use-after-free in docg3_release()\\n\\nIn docg3_release(), the docg3 pointer is obtained from\\ncascade-\u003efloors[0]-\u003epriv before the loop that calls\\ndoc_release_device() on each floor. doc_release_device() frees the\\ndocg3 struct via kfree(docg3) at line 1881. After the loop,\\ndocg3-\u003ecascade-\u003ebch dereferences the already-freed pointer.\\n\\nFix this by accessing cascade-\u003ebch directly, which is equivalent\\nsince docg3-\u003ecascade points back to the same cascade struct, and\\nis already available as a local variable. This also removes the\\nnow-unused docg3 local variable.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nmtd: docg3: corregir uso despu\u00e9s de liberaci\u00f3n en docg3_release()\\n\\nEn docg3_release(), el puntero docg3 se obtiene de cascade-\u003efloors[0]-\u003epriv antes del bucle que llama a doc_release_device() en cada floor. doc_release_device() libera la estructura docg3 a trav\u00e9s de kfree(docg3) en la l\u00ednea 1881. Despu\u00e9s del bucle, docg3-\u003ecascade-\u003ebch desreferencia el puntero ya liberado.\\n\\nSolucione esto al acceder a cascade-\u003ebch directamente, lo cual es equivalente ya que docg3-\u003ecascade apunta de nuevo a la misma estructura cascade, y ya est\u00e1 disponible como una variable local. Esto tambi\u00e9n elimina la variable local docg3 ahora no utilizada.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/mtd/devices/docg3.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"8408655ec8344511667b61d8257dc59c80ee3391\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"f5d2ed4ed47d3906e2495a3537a48b127f497a17\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"2bf706fe7831b319f23a85b9728f961cfed40c3e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"d26f8c361f751c188b7ebaf8189aa0258968fd98\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"16f6588a3b7a2a20d10ad9b766be74c60ba347cc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"d89044889ecd11b0c2f86663597246e9bdd25679\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"d49628d63d4e6bbc8a1621afb88e5fc901611bee\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c8ae3f744ddca0da164bcacee42d1d4b6fe7027d\",\"lessThan\":\"ca19808bc6fac7e29420d8508df569b346b3e339\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/mtd/devices/docg3.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.86\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.27\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.4\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.8\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"40E51E64-6FFB-47A5-B645-DC521C2C3E90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"A1A92866-F406-43B5-B2D1-CFC274753E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.86\",\"matchCriteriaId\":\"55DA1C62-9991-451E-B8A8-E0004E00F789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.27\",\"matchCriteriaId\":\"A10AC84F-C058-47D5-85B4-E6E51A613B74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.4\",\"matchCriteriaId\":\"CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/16f6588a3b7a2a20d10ad9b766be74c60ba347cc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2bf706fe7831b319f23a85b9728f961cfed40c3e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8408655ec8344511667b61d8257dc59c80ee3391\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ca19808bc6fac7e29420d8508df569b346b3e339\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d26f8c361f751c188b7ebaf8189aa0258968fd98\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d49628d63d4e6bbc8a1621afb88e5fc901611bee\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d89044889ecd11b0c2f86663597246e9bdd25679\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f5d2ed4ed47d3906e2495a3537a48b127f497a17\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T06:35:11+00:00",
      "cve": "CVE-2026-46285",
      "id": "CVE-2026-46285",
      "initial_release_date": "2026-06-08T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: mtd: docg3: fix use-after-free in docg3_release()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46285.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T16:53:08Z",
      "cve": "CVE-2026-46285",
      "id": "CVE-2026-46285",
      "initial_release_date": "2026-06-09T02:21:05Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "528",
      "product_status:known_not_affected": "190",
      "product_status:recommended": "254",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46285",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46285.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.