CVE-2026-46289

A flaw was found in the Linux kernel's lib/scatterlist component. Incorrect length calculations within the extract_kvec_to_sg function, when extracting data from a kvec to a scatterlist, could lead to writing beyond intended page boundaries. Additionally, when extracting a user buffer, the scatterlist is temporarily used as a scratch buffer, which could overlap with existing entries if the scatterlist already contains elements. These issues may result in memory corruption, potentially leading to a denial of service or other unspecified impacts.

This vulnerability is rated as Moderate because an attacker requires local access and unprivileged credentials to trigger memory corruption through kernel buffer extraction routines, predominantly resulting in a kernel panic and denial of service. The affected iterator logic was introduced in later kernel baselines, meaning earlier enterprise platforms such as Red Hat Enterprise Linux 8 and 9 do not contain the vulnerable implementation. On affected systems, exploiting the flaw requires inducing specific buffer boundary conditions during data transfer operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.