CVE-2026-46003: Linux vulnerability

CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver doesn't limit the number of nodes it handles. This can be an attack vector if a malicious client starts registering random nodes, leading to memory exhaustion. Hence, limit the maximum number of nodes to 64. Note that, limit of 64 is chosen based on the current platform requirements. If requirement changes in the future, this limit can be increased.

UnknownCVSS not scoredNot KEV-listedUpdatedOct 15, 2026, 01:19 UTC (UTC+00:00)

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2026-46003 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup

Vulnerability profileCVE Program record

Severity: Unknown
CVSS: Not scored
Known Exploited: No
Published: May 27, 2026, 12:55 UTC (UTC+00:00)

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors

3Timeline events

1ADP providers

10Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
May 13, 2026, 15:03 UTC (UTC+00:00)
CVE publishedCVE Program
The CVE record was published.
May 27, 2026, 12:55 UTC (UTC+00:00)
CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Oct 15, 2026, 01:19 UTC (UTC+00:00)

ADP provider summaries

Source materials

CVE List V5 sourceCVE List V5
https://git.kernel.org/stable/c/b703ee903b24974aca4bde99c7d25d66309d35ddCVE reference, Linux
https://git.kernel.org/stable/c/823310645065bd49666e84af689fa95192819f55CVE reference, Linux
https://git.kernel.org/stable/c/ed29887286aba96d1930f4ddb9f235f6b421073cCVE reference, Linux
https://git.kernel.org/stable/c/4c46413661431aa60fb134cd4ecdf8beaa39f824CVE reference, Linux
https://git.kernel.org/stable/c/4665a29c08e1b36bc9db4814f9dde3d23e8fd1b0CVE reference, Linux
https://git.kernel.org/stable/c/5cf6d5e5e3b804a44692fbf548a5179442e2e923CVE reference, Linux
https://git.kernel.org/stable/c/8022876894d09ae485b499058c3357da683bcc5dCVE reference, Linux
https://git.kernel.org/stable/c/27d5e84e810b0849d08b9aec68e48570461ce313CVE reference, Linux
https://cert-portal.siemens.com/productcert/html/ssa-784472.htmlCVE reference, siemens-SADP

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus

LinuxLinux0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffd, 0c2204a4ad710d95d348ea006f14ba926e842ffdunaffected

LinuxLinux5.7, 0, 5.10.259, 5.15.210, 6.1.176, 6.6.140, 6.12.86, 6.18.27, 7.0.4, 7.1affected

Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.