QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-45876

Back to search

CVE-2026-45876

Published: May 27, 2026

Modified: May 27, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in arch_set_shadow_stack_status() alloc_gcs() returns an error-encoded pointer on failure, which comes from do_mmap(), not NULL. The current NULL check fails to detect errors, which could lead to using an invalid GCS address. Use IS_ERR_VALUE() to properly detect errors, consistent with the check in gcs_alloc_thread_stack().

VendorProductVersions

Linux

Linux

affected
b57180c75c7ebff6613886cb69ef6e283a10358b - < c787a235deb33be6eda40beee8f561da5fd8cb8c
affected
b57180c75c7ebff6613886cb69ef6e283a10358b - < a4741114c9622346c4bbb8cc2bbd88153616ffaf
affected
b57180c75c7ebff6613886cb69ef6e283a10358b - < 53c998527ffa60f9deda8974a11ad39790684159

Linux

Linux

affected
6.13
unaffected
0 - < 6.13
unaffected
6.18.14 - <= 6.18.*
unaffected
6.19.4 - <= 6.19.*
unaffected
7.0 - <= *

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now