5.5

CVE-2026-45838: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2026-45838DEBIAN-CVE-2026-45838
Published 27-05-2026Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2026-45838 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.5% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.17%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 49 · Related 49
OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21388-1SUSE-SU-2026:22521-1SUSE-SU-2026:22522-1SUSE-SU-2026:22665-1SUSE-SU-2026:22666-1

Timeline

  1. 27-05-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_next_entry() never returns NULL -- when the current element is the last entry it wraps to the list head via container_of(). The subsequent NULL check is therefore dead code and get_next_key() never returns -ENOENT for the last element, instead reading storage->key from a bogus pointer that aliases internal map fields and copying the result to userspace. Replace it with list_entry_is_head() so the function correctly returns -ENOENT when there are no more entries.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

+0.04 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu162 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < 0f3d9dd5e1fd52b39e25328307c6a694e994ffe3 | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < 26d3339e465e54107bd85884341d1609c5300d6a | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < 2c88b2d96e1d4d0c7c4589a4593d4cdee6d332d6 | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < b4b5a20bed82130da2f2818f04d52378952fbd0b | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < 85a2f30e40f7468db732f55659bc6318874f49af | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < 32ce55d424395904986f5066f8755f6cb9993377 | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < fc39753b7f92e09177777e9c648afe5aa3abb81f | ≥ de9cbbaadba5adf88a19e46df61f7054000838f6, < 5828b9e5b272ecff7cf5d345128d3de7324117f7 | 4.19
  • linux_kernel≥ 4.19, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.141 | ≥ 6.7, < 6.12.91 | ≥ 6.13, < 6.18.33 | ≥ 6.19, < 7.0.10
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.10-1

3 vendors · 165 products

References

51 links
Show all 51 references