CVE-2026-46142 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the device is VF, the bus function ID can be obtained directly from the PCI_FUNC(pdev->devfn).
A vulnerability has been identified in the Linux kernel's net libwx component, specifically related to virtual functions (VFs) accessing a restricted register, WX_CFG_PORT_ST. This register, designated for physical functions (PFs) only, when read by a VF, causes an illegal register access that can lead to a system hang. The issue arises because the VF attempts to read a register that is not accessible to it, disrupting normal operations. The vulnerability affects several versions of the Linux kernel.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/33c5bb50b9c40e8451e6aec4487a31d794b98d92 | kernel.org | Patch |
| https://git.kernel.org/stable/c/68a007a701bc06fa426507c551ef12514f2e721d | kernel.org | Patch |
| https://git.kernel.org/stable/c/694de316f607fe2473d52ca0707e3918e72c1562 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d3bd8040497968f6f5470018724ef7b0df92f707 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f6e656f7cea16b638675a2ab7d7e4cf2516c5eb0 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.6.117, < 6.6.140 >= 6.12.58, < 6.12.88 >= 6.17.8, < 6.18 >= 6.18.1, < 6.18.30 >= 6.19, < 7.0.7 6.18 - 6.18 rc5 6.18 rc6 6.18 rc7 7.1 rc1 7.1 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 24, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 28, 2026 | New CVE Received | kernel.org |