PT-2026-43672 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-06-04 · CVE-2026-45838

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cgroup storage get next key() function within the bpf subsystem. The list next entry() function does not return NULL; instead, when the current element is the last entry, it wraps to the list head via container of(). This causes the subsequent NULL check to be ineffective, preventing the function from returning -ENOENT for the last element. Consequently, the system reads storage->key from an invalid pointer that aliases internal map fields and copies that data to userspace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-45838

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 294

• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-45838 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45838 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45838 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45838 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-45838 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-45838 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45838 · Security Note
• https://suse.com/security/cve/CVE-2026-46149 · Note
• https://suse.com/security/cve/CVE-2026-46187 · Note
• https://suse.com/security/cve/CVE-2026-46037 · Note
• https://suse.com/security/cve/CVE-2026-46158 · Note
• https://suse.com/security/cve/CVE-2026-46204 · Note
• https://suse.com/security/cve/CVE-2026-45995 · Note
• https://suse.com/security/cve/CVE-2026-46242 · Note