---
id: CVE-2026-46003
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: qrtr: ns: Limit the total number of nodes

  Currently, the nameserver doesn't limit the number of nodes it handles.
  This can be an attack vector if a malicious clie…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: qrtr: ns: Limit the total number of nodes

  Currently, the nameserver doesn't limit the number of nodes it handles.
  This can be an attack vector if a malicious clie…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.7, < 6.6.140'
  - 'linux_kernel >= 6.7, < 6.12.86'
  - 'linux_kernel >= 6.13, < 6.18.27'
  - 'linux_kernel >= 6.19, < 7.0.4'
patched:
  - linux_kernel 7.0.4
published: '2026-05-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:19:38.107'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46003'
references:
  - url: 'https://git.kernel.org/stable/c/27d5e84e810b0849d08b9aec68e48570461ce313'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4665a29c08e1b36bc9db4814f9dde3d23e8fd1b0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4c46413661431aa60fb134cd4ecdf8beaa39f824'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5cf6d5e5e3b804a44692fbf548a5179442e2e923'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8022876894d09ae485b499058c3357da683bcc5d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/823310645065bd49666e84af689fa95192819f55'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b703ee903b24974aca4bde99c7d25d66309d35dd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ed29887286aba96d1930f4ddb9f235f6b421073c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-784472.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00123
epssPercentile: 0.0184
ingestedAt: '2026-10-15T03:30:12.880Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: qrtr: ns: Limit the total number of nodes

Currently, the nameserver doesn't limit the number of nodes it handles.
This can be an attack vector if a malicious client starts registering
random nodes, leading to memory exhaustion.

Hence, limit the maximum number of nodes to 64. Note that, limit of 64 is
chosen based on the current platform requirements. If requirement changes
in the future, this limit can be increased.

## Affected

- `linux_kernel >= 5.7, < 6.6.140`
- `linux_kernel >= 6.7, < 6.12.86`
- `linux_kernel >= 6.13, < 6.18.27`
- `linux_kernel >= 6.19, < 7.0.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.0.4`