Linux Kernel Illegal Register Access in net: libwx

Publication date: 2026-05-28

Last updated on: 2026-06-24

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WX_CFG_PORT_ST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the device is VF, the bus function ID can be obtained directly from the PCI_FUNC(pdev->devfn).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-28

Last Modified

2026-06-24

Generated

2026-07-08

AI Q&A

2026-05-28

EPSS Evaluated

2026-07-06

NVD

CVE-2026-46142

EUVD

EUVD-2026-32769

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.18
linux	linux_kernel	6.18
linux	linux_kernel	6.18
linux	linux_kernel	6.18
linux	linux_kernel	From 6.17.8 (inc) to 6.18 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.7 (exc)
linux	linux_kernel	From 6.12.58 (inc) to 6.12.88 (exc)
linux	linux_kernel	From 6.18.1 (inc) to 6.18.30 (exc)
linux	linux_kernel	From 6.6.117 (inc) to 6.6.140 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's network library (libwx) related to Virtual Functions (VF). Specifically, the issue involves an illegal access attempt to a restricted register named WX_CFG_PORT_ST during VF initialization. Since this register is restricted to Physical Functions (PF), reading it from a VF causes an illegal register access that results in the system hanging.

Impact Analysis

The impact of this vulnerability is that when a Virtual Function (VF) tries to read the restricted WX_CFG_PORT_ST register, it causes an illegal register access which leads to a system hang. This means that affected systems could experience crashes or become unresponsive, potentially disrupting normal operations.

Hi! I’m here to help you understand CVE-2026-46142. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70