CVE-2026-45876

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the arch set shadow stack status() function where error handling is insufficient. The alloc gcs() function, which relies on do mmap(), returns an error-encoded pointer upon failure rather than a NULL value. Because the system performs a NULL check, it fails to detect these errors, potentially leading to the use of an invalid Guarded Control Stack (GCS) address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.