Answer in brief
CVE-2026-46165 records a Unknown severity vulnerability in openvswitch: vport: fix self-deadlock on release of tunnel ports. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9d56aced21fb9c104e8a3f3be9b21fbafe448ffc <8ae6c15fc473c9ad03b0173330cce9a092c76154 || >=42f0d3d81209654c08ffdde5a34b9b92d2645896 <c741433f6c8dcdecd1d9549d89053761fd1ea413 || >=bbe7bd722bfaea36aab3da6cc60fb4a05c644643 <6522d59fb7de55ce0f0f285d962243ddffebb01f || >=98b726ab5e2a4811e27c28e4d041f75bba147eab <3df75fff46b1517eb479d8e6b8e3500763715dd0 || >=6931d21f87bc6d657f145798fad0bf077b82486c <366c482965c673565ecb8bcfb15d5548f13a6a10 || >=6931d21f87bc6d657f145798fad0bf077b82486c <aa69918bd418e700309fdd08509dba324fb24296 || b8c56a3fc5d879c0928f207a756b0f067f06c6a8 || >=6.1.168 <6.1.175 || >=6.6.131 <6.6.140 || >=6.12.80 <6.12.88 || >=6.18.21 <6.18.30 || >=6.19.11 <6.20 | 8ae6c15fc473c9ad03b0173330cce9a092c76154, c741433f6c8dcdecd1d9549d89053761fd1ea413, 6522d59fb7de55ce0f0f285d962243ddffebb01f, 3df75fff46b1517eb479d8e6b8e3500763715dd0, 366c482965c673565ecb8bcfb15d5548f13a6a10, aa69918bd418e700309fdd08509dba324fb24296, 6.1.175, 6.6.140, 6.12.88, 6.18.30, 6.20 |
| Linux/Linuxgeneric | 7.0 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
May 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used concurrently and protected by RCU, so netdev_put() must happen after the RCU grace period. So, either in an RCU call or after the synchronize_net(). The rtnl_delete_link() must happen under RTNL and so can't be executed in RCU context. Calling synchronize_net() while holding RTNL is not a good idea for performance and system stability under load in general, so calling netdev_put() in RCU call is the right solution here. However, when the device is deleted, rtnl_unlock() will call netdev_run_todo() and block until all the references are gone. In the current code this means that we never reach the call_rcu() and the vport is never freed and the reference is never released, causing a self-deadlock on device removal. Fix that by moving the rcu_call() before the rtnl_unlock(), so the scheduled RCU callback will be executed when synchronize_net() is called from the rtnl_unlock()->netdev_run_todo() while the RTNL itself is already released.
Quoted source text, attributed separately from HOL analysis.