# flow_dissector: do not dissect PPPoE PFC frames

CVE record · `CVE-2026-46306`

- **Identifiers:** `CVE-2026-46306`
- **State:** Confirmed
- **Severity:** CVSS 7.5 High
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-198](https://cwe.mitre.org/data/definitions/198.html)
- **Tags:** [CWE-198](https://agentprime.io/advisories/tag/cwe-198.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 8 Jun 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 8 Jun 2026, 15:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `10f665b52a75df6eb26ddebbbc072ee264183731 to before e7c811ca372d53c2be7d01a1614e71fae1054836` (git)
  - affected: `d7e541e86122d21f71eb71c5dfa7fb1eb6623fe8 to before abc5bc84e0f2edc7ea2d437afa6ef3fe1fc43200` (git)
  - affected: `46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 18ae9eacfc95cc715c0606b2c86e8aa8a86cf3e3` (git)
  - affected: `46126db9c86110e5fc1e369b9bb89735ddefdae4 to before db104b0d8a7856397c0469d83a4289adf7c54863` (git)
  - affected: `46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 6044392d9cace3a3672b02c8bc7d38b502e51734` (git)
  - affected: `46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 0d00b9015069712944934bab09eaa6c542143049` (git)
  - affected: `46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 7c93f353eab4ea911e394630f07d72e040a729d8` (git)
  - affected: `46126db9c86110e5fc1e369b9bb89735ddefdae4 to before d6c19b31a3c1d519fabdcf0aa239e6b6109b9473` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.0`
  - unaffected: `before 6.0` (semver)
  - unaffected: `6.1.175 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.140 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.88 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.30 to 6.18.*, inclusive` (semver)
  - unaffected: `7.0.7 to 7.0.*, inclusive` (semver)
  - unaffected: `7.1 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.5 High, CVSS 3.1: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0045, the 39th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 8 Jun 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-46306](https://www.cve.org/CVERecord?id=CVE-2026-46306)
- [NVD: CVE-2026-46306](https://nvd.nist.gov/vuln/detail/CVE-2026-46306)

### References from the CNA

- <https://git.kernel.org/stable/c/e7c811ca372d53c2be7d01a1614e71fae1054836>
- <https://git.kernel.org/stable/c/abc5bc84e0f2edc7ea2d437afa6ef3fe1fc43200>
- <https://git.kernel.org/stable/c/18ae9eacfc95cc715c0606b2c86e8aa8a86cf3e3>
- <https://git.kernel.org/stable/c/db104b0d8a7856397c0469d83a4289adf7c54863>
- <https://git.kernel.org/stable/c/6044392d9cace3a3672b02c8bc7d38b502e51734>
- <https://git.kernel.org/stable/c/0d00b9015069712944934bab09eaa6c542143049>
- <https://git.kernel.org/stable/c/7c93f353eab4ea911e394630f07d72e040a729d8>
- <https://git.kernel.org/stable/c/d6c19b31a3c1d519fabdcf0aa239e6b6109b9473>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-46306>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-46306/>. Everything for agents: <https://agentprime.io/llms.txt>.