Missing Release of Resource after Effective Lifetime in Linux kernel - CVE-2026-45964
Published: May 28, 2026
Vulnerability identifier: #VU132521
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-45964
CWE-ID: CWE-772
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a reference count leak in gss_alloc_msg() in the SUNRPC gss_auth handling code when processing a non-NULL service name and memory allocation fails in kstrdup_const(). A local user can trigger the error path to cause a denial of service.
The issue occurs because the gss_auth reference is not released on the err_put_pipe_version error path, which can prevent the structure from being freed.
How to mitigate CVE-2026-45964
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/3b2b6c42070ce4204936288253baf101e995c2d3
- https://git.kernel.org/stable/c/655c9ba9915f05266998dbbf4b76b3c79b8a70aa
- https://git.kernel.org/stable/c/a1bc9561b617ec7e2d09e6c134d1db8fcf9ca4a6
- https://git.kernel.org/stable/c/a2d4e9a76de0b2178001214ba5de5bf94a7354aa
- https://git.kernel.org/stable/c/b559be2ec6cdb2e9c2c36c23fbbd4690d8a5c3f7
- https://git.kernel.org/stable/c/c20f925214249bb4fc04f7e197bea142a6438af6
- https://git.kernel.org/stable/c/dd2fdc3504592d85e549c523b054898a036a6afe
- https://git.kernel.org/stable/c/e464e26b2457005c87e158570498274b9f3b90c7