Riskcovery

CVE-2026-45876

arm64/gcs: Fix error handling in arch_set_shadow_stack_status()

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64/gcs: Fix error handling in arch_set_shadow_stack_status()

alloc_gcs() returns an error-encoded pointer on failure, which comes from do_mmap(), not NULL.

The current NULL check fails to detect errors, which could lead to using an invalid GCS address.

Use IS_ERR_VALUE() to properly detect errors, consistent with the check in gcs_alloc_thread_stack().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b57180c75c7ebff6613886cb69ef6e283a10358b to before c787a235deb33be6eda40beee8f561da5fd8cb8cAffected
  • b57180c75c7ebff6613886cb69ef6e283a10358b to before a4741114c9622346c4bbb8cc2bbd88153616ffafAffected
  • b57180c75c7ebff6613886cb69ef6e283a10358b to before 53c998527ffa60f9deda8974a11ad39790684159Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.