CVE advisoryCRITICAL
CVE-2026-46266
Linux Kernel RAW Socket Vulnerability Allows ICMP Packet Manipulation
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A Linux kernel vulnerability allows specially crafted ICMP packets to alter the FNHE cache. This could lead to system configuration changes or denial of service when a RAW socket is configured to accept any IP protocol.