CVE-2026-45846: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
bareudp: fix NULL pointer dereference in bareudpfillmetadatadst()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45846?
CVE-2026-45846 has a risk score of 23, indicating a moderate severity vulnerability.
What causes CVE-2026-45846?
CVE-2026-45846 is caused by a NULL pointer dereference in the bareudp_fill_metadata_dst() function due to a lack of NULL checks.
How do I fix CVE-2026-45846?
To fix CVE-2026-45846, update to the patched version of the Linux kernel where the NULL pointer dereference has been resolved.
Which versions of the Linux kernel are affected by CVE-2026-45846?
CVE-2026-45846 affects specific versions of the Linux kernel that include the bareudp implementation prior to the fix.
Is CVE-2026-45846 exploitable remotely?
CVE-2026-45846 can be exploited remotely since it involves the bareudp protocol in network communications.