Boletines de Vulnerabilidades

CVE-2026-45887

   
Software afectado LINUX KERNEL
 
In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix memleak of newsk in unix_stream_connect().

When prepare_peercred() fails in unix_stream_connect(),
unix_release_sock() is not called for newsk, and the memory
is leaked.

Let's move prepare_peercred() before unix_create1().

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-45887