CVE-2026-45887: af_unix: Fix memleak of newsk in unix_stream_connect().
Published May 27, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
afunix: Fix memleak of newsk in unixstreamconnect().
When preparepeercred() fails in unixstreamconnect(), unixreleasesock() is not called for newsk, and the memory is leaked.
Let's move preparepeercred() before unixcreate1().
Affected Software
3 affected components
Linux Linux kernel
Linux Linux kernel>=6.16<6.18.14
Linux Linux kernel>=6.19<6.19.4
Event History
May 27, 2026
CVE Published
via MITRE·12:16 PM
Data Sourced
via MITRE·12:16 PM
Description
Data Sourced
via NVD·02:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to trigger this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
2
What is the expected security impact?
The CVSS assessment rates the availability impact as high, with no confidentiality or integrity impact.
3
Are fixes identified for this issue?
The issue is described as resolved, with fixes referenced in stable commits 365996a2b14d07caa9e33d367b67ea26c09d89b4, a5d95d7caba0160fb7b2b8d2bd96d5a1be861d9f, and 6884028cd7f275f8bcb854a347265cb1fb0e4bea.