Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-46306

flow_dissector: do not dissect PPPoE PFC frames

CVSS 7.5 HighEPSS 0.0045 · 39th percentile

Published by the CVE Program (CNA: Linux) at 8 Jun 2026, 15:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 10f665b52a75df6eb26ddebbbc072ee264183731 to before e7c811ca372d53c2be7d01a1614e71fae1054836 git
  • affected d7e541e86122d21f71eb71c5dfa7fb1eb6623fe8 to before abc5bc84e0f2edc7ea2d437afa6ef3fe1fc43200 git
  • affected 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 18ae9eacfc95cc715c0606b2c86e8aa8a86cf3e3 git
  • affected 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before db104b0d8a7856397c0469d83a4289adf7c54863 git
  • affected 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 6044392d9cace3a3672b02c8bc7d38b502e51734 git
  • affected 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 0d00b9015069712944934bab09eaa6c542143049 git
  • affected 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before 7c93f353eab4ea911e394630f07d72e040a729d8 git
  • affected 46126db9c86110e5fc1e369b9bb89735ddefdae4 to before d6c19b31a3c1d519fabdcf0aa239e6b6109b9473 git
Other versions: unaffected
Linux Linux
  • affected 6.0
  • unaffected before 6.0 semver
  • unaffected 6.1.175 to 6.1.*, inclusive semver
  • unaffected 6.6.140 to 6.6.*, inclusive semver
  • unaffected 6.12.88 to 6.12.*, inclusive semver
  • unaffected 6.18.30 to 6.18.*, inclusive semver
  • unaffected 7.0.7 to 7.0.*, inclusive semver
  • unaffected 7.1 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-46306
CNA
Linux
Weakness (CWE)
CWE-198
Tags
Published
8 Jun 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.5 High 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0045, the 39th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 8 Jun 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.