Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in arch_set_shadow_stack_status() alloc_gcs()… (CVE-2026-45876)
A vulnerability in the Linux kernel arm64/gcs component involves improper error handling in the arch_set_shadow_stack_status() function. The alloc_gcs() function returns an error-encoded pointer on failure, but the existing NULL check fails to detect this error, potentially leading to use of an invalid GCS address. This issue has been resolved by using IS_ERR_VALUE() to properly detect errors, aligning with the check in gcs_alloc_thread_stack().
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-45876 affects the arm64/gcs component where alloc_gcs() returns an error-encoded pointer from do_mmap() on failure rather than NULL. The original code incorrectly checks for NULL to detect errors, which can result in using an invalid GCS address. The fix involves replacing the NULL check with IS_ERR_VALUE() to correctly identify error pointers, preventing improper use of invalid memory addresses.
Potential Impact
This vulnerability does not affect confidentiality or integrity but impacts availability, as indicated by the CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Improper error handling could lead to kernel instability or crashes due to the use of invalid GCS addresses.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or vendor advisory content is provided in the input data. Users should monitor official Linux kernel and distribution advisories for updates addressing this issue.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in arch_set_shadow_stack_status() alloc_gcs()… (CVE-2026-45876)
Description
A vulnerability in the Linux kernel arm64/gcs component involves improper error handling in the arch_set_shadow_stack_status() function. The alloc_gcs() function returns an error-encoded pointer on failure, but the existing NULL check fails to detect this error, potentially leading to use of an invalid GCS address. This issue has been resolved by using IS_ERR_VALUE() to properly detect errors, aligning with the check in gcs_alloc_thread_stack().
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-45876 affects the arm64/gcs component where alloc_gcs() returns an error-encoded pointer from do_mmap() on failure rather than NULL. The original code incorrectly checks for NULL to detect errors, which can result in using an invalid GCS address. The fix involves replacing the NULL check with IS_ERR_VALUE() to correctly identify error pointers, preventing improper use of invalid memory addresses.
Potential Impact
This vulnerability does not affect confidentiality or integrity but impacts availability, as indicated by the CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Improper error handling could lead to kernel instability or crashes due to the use of invalid GCS addresses.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or vendor advisory content is provided in the input data. Users should monitor official Linux kernel and distribution advisories for updates addressing this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-c8fp-ff95-66mv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-45876"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a3ef7ef27e9c79719034be7
Added to database: 06/26/2026, 22:06:39 UTC
Last enriched: 08/01/2026, 02:47:59 UTC
Last updated: 09/14/2026, 22:01:34 UTC
Views: 96
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.