CVE-2026-45848

MediumCVSS 5.5/10Last modified Jun 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix NULL sock in aa_sock_file_perm

Deal with the potential that sock and sock-sk can be NULL during socket setup or teardown. This could lead to an oops. The fix for NULL pointer dereference in __unix_needs_revalidation shows this is at least possible for af_unix sockets. While the fix for af_unix sockets applies for newer mediation this is still the fall back path for older af_unix mediation and other sockets, so ensure it is covered.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < 68538ec34fcb4194c7961dc4eca6f5537fec8067; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < 5121b7283f1c46e4c06b88b1dda7b064429d77de; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < c11b7c3280d000376e27ebfed17ec7046699eab4; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < 0dc19bca22606f7a61d5988408f74e3ae0ef3486; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < 3852eb9a0392eb435c03dcb47d581bcfe6a9a95b; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < ccb66a3c6c8f51b3ed1bc003b70bb9ff99e8d835; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < 8a0ededbfcff74598f82f1d4b8ef9db28878b317; >= 56974a6fcfef69ee0825bd66ed13e92070ac5224, < 00b67657535dfea56e84d11492f5c0f61d0af297
LinuxLinux4.17

References

Timeline

Published
May 27, 2026
Last modified
Jun 25, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-458495.5In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj(CVE-2026-45859.8A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the fCVE-2026-458505.5In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum vaCVE-2026-458517.1In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted memory table The reserve_unacceptedCVE-2026-458527.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(),CVE-2026-458537.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memrangesCVE-2026-458545.5In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - unregister only available algorithm EIP9CVE-2026-458555.5In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: avoid Non-NCQ command starvation When a non-NCQ commCVE-2026-458567.1In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send CVE-2026-458575.5In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit pathCVE-2026-458585.5In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 WheCVE-2026-458597.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmenta
CVE-2026-45848: Medium severity, CVSS 5.5 | Vulnix