Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-45887

af_unix: Fix memleak of newsk in unix_stream_connect().

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix memleak of newsk in unix_stream_connect(). When prepare_peercred() fails in unix_stream_connect(), unix_release_sock() is not called for newsk, and the memory is leaked. Let's move prepare_peercred() before unix_create1().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fd0a109a0f6b7524543d17520da92a44a9f5343c to < 365996a2b14d07caa9e33d367b67ea26c09d89b4affected
  • fd0a109a0f6b7524543d17520da92a44a9f5343c to < a5d95d7caba0160fb7b2b8d2bd96d5a1be861d9faffected
  • fd0a109a0f6b7524543d17520da92a44a9f5343c to < 6884028cd7f275f8bcb854a347265cb1fb0e4beaaffected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.14 to ≤ 6.18.*unaffected
  • 6.19.4 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References