CVE-2026-46253

A flaw was found in the Linux kernel's pstore/ram component. This vulnerability, a heap buffer overflow, occurs when the system attempts to save old persistent RAM logs and the buffer size changes, leading to an out-of-bounds write. While the conditions for exploitation are extremely difficult to achieve, a successful exploit could lead to memory corruption, potentially causing system instability or a denial of service.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires a highly uncommon sequence of non-default preconditions and local privileges to trigger kernel memory corruption or a denial of service. The affected persistent RAM logging mechanism is not configured by default on standard installations, and triggering the flaw depends on having periodic pstore timer-driven logging explicitly enabled alongside pre-existing truncated crash records. Consequently, typical production deployments running default kernel configurations are not exposed to automatic or remote exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.