Kernel NULL Pointer Dereference in Linux Networking Component

CVE-2026-45845

What is CVE-2026-45845?

A vulnerability in the Linux kernel networking component allows an unprivileged local user to cause a kernel panic through improper handling of a TAPRIO child qdisc during deletion. Specifically, when a user attempts to delete a TAPRIO child qdisc, the system improperly handles a NULL pointer in the class dump, potentially leading to a crash. This could be exploited in network namespaces where unprivileged operations are allowed, making it critical for administrators to promptly address this issue by applying available patches and updates.

References