CVE-2026-46037

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A flaw exists in the IPv4 ICMP implementation where the system fails to validate the reply type before accessing the icmp pointers[] array. Extended echo replies utilize ICMP EXT ECHOREPLY as the outbound reply type, which falls outside the range covered by icmp pointers[] (which only describes traditional ICMP types up to NR ICMP TYPES). This can lead to an out-of-bounds access when consulting the array for reply types outside the supported range.

Recommendations Update to kernel-devel-7.0.11-1.1 for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.