Local escalation of privilege affecting the Linux kernel
A vulnerability affecting the Linux kernel would allow a malicious actor to cause an escalation of privilege on affected systems.
Description
Technical context and vulnerability details
The Linux kernel forms the heart of the operating system for many distributions deployed in virtual, physical, and cloud environments. This component is affected by a vulnerability labeled CVE-2026-46331, resulting from a memory overflow in the act_pedit module, the specific element responsible for modifying network traffic data. Its exploitation would allow a malicious actor with restricted local privileges to execute any command of their choice with administrator rights on affected systems, including by abusing unprivileged user namespaces. It is classified high with a severity score of 7.8 according to CVSS V3.1.
Potential Risks & Impact
Potential consequences upon exploitation
- Privilege escalation;
- Compromise of system integrity;
- Breach of confidentiality and availability of data;
Affected systems
Products, components and targeted versions
- Linux kernel versions ranging from v5.18 to v7.1-rc6 inclusive;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Update the Linux kernel to its latest stable version;
- Prevent automatic loading of the act_pedit module, in accordance with good security practices recommended by the publisher;
- Restrict or disable unprivileged user namespaces to reduce the attack surface;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.