linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] PACKET_EDIT_MEME: Kernel vulnerability for gaining root access

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: [[Linux-announce] ] PACKET_EDIT_MEME: Kernel vulnerability for gaining root access
Date: Thu, 25 Jun 2026 15:07:56 +0200
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=psi.ch; dmarc=pass action=none header.from=psi.ch; dkim=pass header.d=psi.ch; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=QW+Tu/fHM7iqicEskmYNWfgDGrC5DSmcsKDFk/nYCss=; b=Id2X0Gzkbp7OLLDCX6YJOVVgOulXCJVu4tusBl6jbKwpzF32bNl+nhWHUS57ZRdUKDFV/TdAd6VayxZK8gFp8OIZAZiZqFXoTncVz5muSV/Fwp/xrqNC1DVqJJyFp5ZXljbYyVcCnofFuT63DEB/88m0kV2WKqx9guiGzlUgHfnqk9WRXL9OJy6s0J64uRMaQNEIiqtCdgxA8dJ7452b4FiGQpZ5I2Z+7csfI6tpp+WCNFStAbbBlOeYRuaMC2Ixv5Jk7ZTBI9VE7wUFcc13Bcvchq1N5upjAlawerguXMSKWtqTNB+Tdnhx25EOi2d2iL60HzgWeJ7KMiyu15GCQQ==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=SGlZitRAWPkB+HclX1qZx0D6FyjlhL9VcuBeZSbA5nR6EsRSM/VPhes29o25EsxkCZkauqTCVAsLc/cC2nfVDVLvv1bItRKiyxcoonYQf2crq4FK1F//nzDVa+nov1rWmwG/aBclNT8qxOnFHn2UEXr7+lQK+k+WAcrdNLuRA0EcsWH21SsK11vr1M38MIPJbT94V8tGzJMLMx1Atltxoet3oLvxPmOxA2hqa2bfHnJl5gcAssSPbRgkP2kdgGyuxCWZvtMcz3TBuNS7xJq0G1eL/HChkNFLQPLYmr2mrTHIz0hxRg/Cf6c/ZukFO2D3SbYnmg3raNTvOcZSeB9Xog==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Hi

The PACKET_EDIT_MEME (CVE-2026-46331) vulnerability allows for local privilege escalation:

https://github.com/sgkdev/packet_edit_meme

RedHat information and mitigation guide:

https://access.redhat.com/security/cve/cve-2026-46331

They already have released kernels with fixes:

RHEL8: kernel-4.18.0-553.136.1.el8_10
RHEL9: kernel-5.14.0-687.17.1.el9_8

so you may update and reboot.

Kind regards
Konrad

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
OBBA/230
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch

[[Linux-announce] ] PACKET_EDIT_MEME: Kernel vulnerability for gaining root access, Konrad Bucheli (PSI), 06/25/2026