Page Cache Corruption Vulnerability in Linux Kernel - Vendor: Linux

CVE-2026-46331

What is CVE-2026-46331?

An issue exists in the Linux Kernel where improper handling of copy-on-write (COW) operations can lead to page cache corruption. This is due to the tcf_pedit_act() function, which computes the COW range without considering runtime header offsets added by typed keys. As a result, portions of the write region may remain un-COW'd, potentially causing instability during packet processing. The vulnerability has been addressed by refining the placement of skb_ensure_writable() within the key loop, ensuring accurate offset calculations and including overflow checks to enhance overall system integrity.

References