CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-45984: linux kernel from 5.2 (inclusive), before 5.10.252 (exclusive), from 5.11 (inclusive), before 5.15.202 (exclusive)…

CVE-2026-45984. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00184 (percentile 0.07433), scored 15-Oct-2026.

Affected technology

linux kernel · from 5.2 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.14 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.4 (exclusive)
linux

Linux · d0a22a4b03b8475b7aa3fa41243c26c291407844 to before 1403989d1b502f4a2c0d0b42ccf1c25748442eff, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before 1cae1bafdf9caa9b462b19af06b1a06902e4e142, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before 764c3c84b5683e608f43735c803a5f415046686c, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before d87268326b277af3665237ac76a73dd9fa8e21b4, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before 87d4954b5c59735a99ea98cb208d47130f6dce7d, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before 6d76febba07c40bcf358f63216d36ea68cf1c215, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before 815ddd27c0c7171a99fe802fdb19098ddef8b19d, d0a22a4b03b8475b7aa3fa41243c26c291407844 to before faddeb848305e79db89ee0479bb0e33380656321
Linux

Linux · 5.2
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux for NVIDIA 26 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: fs/gfs2/bmap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

Published

CWE
CWE-416, CWE-826
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00184 · percentile 0.07433 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-45984.html