CVE-2026-45876 - arm64/gcs: Fix error handling in arch_set_shadow_stack_status()

MEDIUM

arm64/gcs: Fix error handling in arch_set_shadow_stack_status()

Published May 27, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.16%

alloc_gcs() returns an error-encoded pointer on failure, which comes from do_mmap(), not NULL.

The current NULL check fails to detect errors, which could lead to using an invalid GCS address.

Use IS_ERR_VALUE() to properly detect errors, consistent with the check in gcs_alloc_thread_stack().

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-390

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-45876		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2481913		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32342		Advisory
https://git.kernel.org/stable/c/53c998527ffa60f9deda8974a11ad39790684159		Patch
https://git.kernel.org/stable/c/a4741114c9622346c4bbb8cc2bbd88153616ffaf		Patch
https://git.kernel.org/stable/c/c787a235deb33be6eda40beee8f561da5fd8cb8c		Patch
https://lore.kernel.org/linux-cve-announce/2026052714-CVE-2026-45876-4460@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-45876
https://www.cve.org/CVERecord?id=CVE-2026-45876