Local Privilege Escalation Vulnerability in Linux Kernel

CVE-2026-45838

What is CVE-2026-45838?

A vulnerability exists in the Linux Kernel where the function responsible for retrieving keys from a cgroup storage incorrectly processes the last entry. Specifically, the function list_next_entry() fails to return NULL when the end of the list is reached, leading to an erroneous pointer dereference. This results in the copying of data from an invalid location, which could potentially disclose sensitive data to userspace. The issue has been resolved by implementing a proper check to ensure that the function accurately returns an error when there are no remaining entries.

References