Vulnerability in Linux

CVE-2026-45846

In the Linux kernel, the following vulnerability has been resolved: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() bareudp_fill_metadata_dst() passes bareudp->sock to udp_tunnel6_dst_lookup() in the IPv6 path withou…

EPSS: 0.000 (9.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 5.15.209, 5.7, 571912c69f0ed731bd1e071ade9dc7ca4aa52065

References