CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink().
CVE-2026-46120 is a vulnerability in ip6_gre: Use cached t->net in ip6erspan_changelink()., rated Moderate by Microsoft, with a CVSS 3.1 base score of 5.5 (Medium). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 0.13% probability of exploitation activity in the next 30 days, higher than 2% of all scored vulnerabilities. Microsoft released the fix on 28 May 2026 in the May 2026 Patch Tuesday. It affects 1 product in 1 product family (Open Source Software).