{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-46333",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-46333",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-05-15T12:58:44.599Z",
    "updatedAt": "2026-10-15T01:21:42.063Z",
    "importedAt": "2026-10-24T01:58:14.884Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "ptrace: slightly saner 'get_dumpable()' logic",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner 'get_dumpable()' logic\n\nThe 'dumpability' of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don't have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses 'dumpable' to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS).  Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt's not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn't make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don't have a\nMM pointer, we'll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "15b828a46f305ae9f05a7c16914b3ce273474205"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "4709234fd1b95136ceb789f639b1e7ea5de1b181"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "8f907d345bae8f4b3f004c5abc56bf2dfb851ea7"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "2a93a4fac7b6051d3be7cd1b015fe7320cd0404d"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "01363cb3fbd0238ffdeb09f53e9039c9edf8a730"
            },
            {
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "status": "affected",
              "versionType": "git",
              "lessThan": "31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a"
            },
            {
              "version": "d5b3e840dbf6dd2c0f30b5982b6f5ecd49e46b12",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "03eed7afbc09e061f66b448daf7863174c3dc3f3",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "e45692fa1aea06676449b63ef3c2b6e1e72b7578",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "694a95fa6dae4991f16cda333d897ea063021fed",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "3.16.52",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "3.17"
            },
            {
              "version": "4.4.40",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.5"
            },
            {
              "version": "4.8.16",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.9"
            },
            {
              "version": "4.9.1",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.10"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.10",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.10"
            },
            {
              "version": "5.10.256",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.207",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.173",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.139",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.89",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.31",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.0.8",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.*"
            },
            {
              "version": "7.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}