CVE-2026-46205
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability in the Linux kernel has been resolved by disallowing all private IOCTLs. IOCTLs are not as safe as one might assume, hence they have been temporarily disabled.
Risk Assessment
Disallowed private IOCTLs may lead to unauthorized access to kernel functions, posing a risk to system integrity.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and ensure system security.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private IOCTLs Disallow all private IOCTLs. These aren't quite as safe as one could assume of IOCTL handlers; disable them for now. Instead of removing the code, return in the beginning of the function if cmd is non-zero in order to keep static checkers happy.