CVE-2026-46306: flow_dissector: do not dissect PPPoE PFC frames
flowdissector: do not dissect PPPoE PFC frames
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Compensating control
Configure the affected networking stack to not process PPPoE Protocol Field Compression (PFC) frames, reducing attack surface and avoiding the flow-dissector crash.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46306?
The severity of CVE-2026-46306 is rated as 33, indicating a low to moderate risk.
How do I fix CVE-2026-46306?
To resolve CVE-2026-46306, ensure that you update your Linux kernel to the latest patched version.
What type of frames does CVE-2026-46306 address?
CVE-2026-46306 addresses issues with dissecting PPPoE PFC frames in the Linux kernel.
Which software is affected by CVE-2026-46306?
CVE-2026-46306 affects the Linux kernel software.
How was CVE-2026-46306 resolved?
CVE-2026-46306 was resolved by modifying the flow dissector logic to avoid dissection of PPPoE PFC frames.