CVE-2026-45887: af_unix: Fix memleak of newsk in unix_stream_connect().
Published May 27, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
afunix: Fix memleak of newsk in unixstreamconnect().
When preparepeercred() fails in unixstreamconnect(), unixreleasesock() is not called for newsk, and the memory is leaked.
Let's move preparepeercred() before unixcreate1().
Affected Software
3 affected components
Linux Linux kernel
Linux Linux kernel>=6.16<6.18.14
Linux Linux kernel>=6.19<6.19.4
Event History
May 27, 2026
CVE Published
via MITRE·12:16 PM
Data Sourced
via MITRE·12:16 PM
Description
Data Sourced
via NVD·02:17 PM
RemedyDescriptionSeverityWeaknessAffected Software