Is CVE-2026-46222 actively exploited?

No active exploitation of CVE-2026-46222 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-46222 be exploited remotely?

The attack vector of CVE-2026-46222 has not been classified yet.

What is the CVSS score of CVE-2026-46222?

CVE-2026-46222 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2026-46222

NONE

CVE-2026-46222

Published: May 28, 2026· Updated: May 28, 2026

EPSS:0.02%probability of exploitation in 30 daysPercentile:5.3th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads

The pads missed checks for connected devices which may a null dereference

when the stream is enabled.

Unable to handle kernel NULL pointer dereference at virtual address

0000000000000020

pc : rkcif_interface_enable_streams+0x48/0xf0

lr : rkcif_interface_enable_streams+0x44/0xf0

Call trace:

rkcif_interface_enable_streams+0x48/0xf0

v4l2_subdev_enable_streams+0x26c/0x3f0

rkcif_stream_start_streaming+0x140/0x278

vb2_start_streaming+0x74/0x188

vb2_core_streamon+0xe0/0x1d8

vb2_ioctl_streamon+0x60/0xa8

v4l_streamon+0x2c/0x40

__video_do_ioctl+0x34c/0x400

video_usercopy+0x2d0/0x800

video_ioctl2+0x20/0x60

v4l2_ioctl+0x48/0x78

NVD Source

Technical Analysis

CVE-2026-46222 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Affected Vendors & Products

Mentioned vendors (from description):

Linux

CPE data not yet available in NVD for this CVE.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

All References (2)

→

https://git.kernel.org/stable/c/318142640590342bfec7aa06d0bdcd0ddbf953d0

→

https://git.kernel.org/stable/c/8e3c751259dc2d1325838eff26f41032523c7b57

Quick Facts

CVE IDCVE-2026-46222

SeverityNONE

CISA KEVNo

EPSS (30d)0.02%

PublishedMay 28, 2026

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2026-46222 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2026-46222·NVD