PT-2026-43833 · Linux+2 · Linux Kernel+2

CVE-2026-45966 · Published 2026-05-27 · Updated 2026-07-06

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.17 through 6.17

Description A NULL pointer dereference occurs in the unix needs revalidation() function when receiving file descriptors via SCM RIGHTS. During socket setup or teardown, both the socket pointer and the socket's sk pointer can be NULL. The function attempts to access sock->sk->sk family without verifying if sock or sock->sk are NULL, leading to a kernel crash.

Recommendations Update the Linux kernel to a version where NULL checks for sock and sock->sk are implemented in the unix needs revalidation() function before accessing sk family.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-45966

USN-8374-1

USN-8508-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 123

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45966.json · Exploit
• https://ubuntu.com/security/CVE-2026-23272 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31676 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43376 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47326 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23427 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43197 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43071 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43378 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31659 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31504 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46300 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-45966 · Vendor Advisory