Disclosure of sensitive information affecting the Linux kernel

The Linux kernel is the central component of the Linux operating system, which orchestrates communication between hardware and software and allows resource management to ensure system stability and security. This component is affected by a vulnerability labeled CVE-2026-46333 resulting from a logical flaw in the inter-process access control mechanism. This weakness creates a short exploitable window when shutting down a privileged process. Exploitation of this vulnerability would allow an unprivileged local user to bypass system protections and access sensitive files, including the SSH server private keys and the /etc/shadow file containing password hashes. It is classified high with a severity score of 7.8 according to CVSS V3.1.

• Linux kernel versions 5.6 and later, prior to patched stable versions 5.10.256, 5.15.207, 6.1.173, 6.6.139, 6.12.89, 6.18.31 and 7.0.8;