← Back to CVE search

CVE-2026-45887

Linux Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix memleak of newsk in unix_stream_connect(). When prepare_peercred() fails in unix_stream_connect(), unix_release_sock() is not called for newsk, and the memory is leaked. Let-s move prepare_peercred() before unix_create1().

CVSS 5.5EPSS 0.153%Risk 0.56
View source
Published
2026-05-27 14:17:02
Affected versions
unknown
Type
Core software
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Operating systems
Linux