Oracle Linux Kernel ptrace Vulnerability CVE-2026-46333 Disclosed

Linuxsecurity

Oracle Linux Kernel ptrace Vulnerability CVE-2026-46333 Disclosed

First seen 22 May 2026, 13:58 UTC • •74.0

Article Content

1 / 365

Browse articles

ThreatCluster •May 23, 2026 at 12:27 UTC

•CVE-2026-46333 affects Oracle Linux 8 and 9, allowing unauthorized process memory access.
•Patches are available, and users are urged to update their systems immediately.
•The vulnerability was disclosed on May 15, 2026, with a PoC released shortly after.

Oracle has disclosed a critical security vulnerability in the ptrace functionality of its Linux kernels, identified as CVE-2026-46333. This vulnerability affects multiple versions of Oracle Linux, including Oracle Linux 8, 9, and the Unbreakable Enterprise Kernel (UEK). The flaw allows unauthorized access to process memory, which could potentially be exploited to gain elevated privileges. The vulnerability was published on May 15, 2026, with a proof of concept (PoC) available as of May 16, 2026. Users are advised to apply the latest patches immediately to mitigate risks. The affected kernel versions include 6.12.0-202.76.4.3 and 5.15.0-320.202.8.4 for Oracle Linux 9 and 8, respectively. The issue has been confirmed by Oracle and is being treated with urgency due to its potential impact on system security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 146d ago How this analysis works

Timeline

2026-05-15

CVE-2026-46333 published

Oracle disclosed a ptrace vulnerability affecting multiple Oracle Linux versions, allowing unauthorized access to process memory.

2026-05-16

First public PoC released

A proof of concept demonstrating the exploitation of CVE-2026-46333 was made public, increasing urgency for patching.

2026-05-22

Patches released

Oracle released patches for the affected kernel versions, urging users to apply them to secure their systems.

More articles in this cluster (364)

Following this threat?

Track CVE-2024-34459 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…