Answer in brief
CVE-2026-46162 records a Unknown severity vulnerability in ice: fix double free in ice_sf_eth_activate() error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 <2ca30340b5028ddc3f17086a538feeff06167b1b || >=13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 <121d1f253aed515cd85748f68c664a6cb756e8ad || >=13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 <d0c6a4816609f145ffcc74e64baa214c571c17c6 || >=13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 <9aab1c3d7299285e2569cbc0ed5892d631a241b2 | 2ca30340b5028ddc3f17086a538feeff06167b1b, 121d1f253aed515cd85748f68c664a6cb756e8ad, d0c6a4816609f145ffcc74e64baa214c571c17c6, 9aab1c3d7299285e2569cbc0ed5892d631a241b2 |
| Linux/Linuxgeneric | 6.12 | Not reported |
Published upstream
May 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() error path When auxiliary_device_add() fails, ice_sf_eth_activate() jumps to aux_dev_uninit and calls auxiliary_device_uninit(&sf_dev->adev). The device release callback ice_sf_dev_release() frees sf_dev, but the current error path falls through to sf_dev_free and calls kfree(sf_dev) again, causing a double free. Keep kfree(sf_dev) for the auxiliary_device_init() failure path, but avoid falling through to sf_dev_free after auxiliary_device_uninit().
Quoted source text, attributed separately from HOL analysis.