CVE-2026-46322

A flaw was found in the Linux kernel's tun driver. This vulnerability occurs when the build_skb() function fails within tun_xdp_one(), leading to a failure to free an allocated memory page. Each such failure results in a memory leak, where a 'page-frag chunk' is not released. Over time, repeated exploitation of this flaw could lead to memory exhaustion, resulting in a Denial of Service (DoS) for the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.