CVE-2026-45959 Details
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the `__cleanup(kfree)` attribute will make the address of the local variable, rather than the address returned by kmalloc, passed to kfree directly and lead to a crash due to invalid deallocation of stack address. According to other places in the repo, the correct usage should be `__free(kfree)`. The code coincidentally compiled because the parameter type `void *` of kfree is compatible with the desired type `struct { ... } **`.
A vulnerability in the Linux kernel's crypto component, specifically within the CCP (Compression Control Protocol) driver, has been addressed. The issue arose from improper cleanup management of memory allocated with kmalloc, leading to a crash. When a local pointer variable is annotated with the __cleanup(kfree) attribute, it inadvertently passes the address of the variable itself, rather than the address allocated by kmalloc, to kfree. This mismanagement causes an invalid deallocation of a stack address, resulting in a crash. The correct approach should be to use __free(kfree). This vulnerability affects the Linux kernel stable tree.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/90f9090e3e744a8fe3bb6fa0e61f577347728b0b | kernel.org | Patch |
| https://git.kernel.org/stable/c/9a3ace9b010ffd8c422c97844ae152f7c53d6b18 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d5abcc33ee76bc26d58b39dc1a097e43a99dd438 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.17, < 6.18.14 >= 6.19, < 6.19.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 16, 2026 | Initial Analysis | [email protected] |
| May 30, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |