What’s Vulnerable › Vulnerabilities

CVE-2026-46142: net: libwx: fix VF illegal register access

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-06-24

Description

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the device is VF, the bus function ID can be obtained directly from the PCI_FUNC(pdev->devfn).

Affected products

• Linux kernel: from 6.6.117 before 6.6.140; from 6.12.58 before 6.12.88; from 6.17.8 before 6.18; from 6.18.1 before 6.18.30; from 6.19 before 7.0.7; 6.18, 6.18-rc5, 6.18-rc6, 6.18-rc7, 7.1-rc1, 7.1-rc2 — fixed in 6.12.88, 6.18, 6.18.30, 6.6.140, 7.0.7

How to fix

Upgrade to a fixed version: Linux kernel 6.12.88, 6.18, 6.18.30, 6.6.140. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/33c5bb50b9c40e8451e6aec4487a31d794b98d92
• https://git.kernel.org/stable/c/68a007a701bc06fa426507c551ef12514f2e721d
• https://git.kernel.org/stable/c/694de316f607fe2473d52ca0707e3918e72c1562
• https://git.kernel.org/stable/c/d3bd8040497968f6f5470018724ef7b0df92f707
• https://git.kernel.org/stable/c/f6e656f7cea16b638675a2ab7d7e4cf2516c5eb0

Get alerted when CVE-2026-46142 or the next vulnerability affects your stack